LDAP server unavailable: SERVER_DOWN
Skale, Franz
i.bin at dah.am
Thu Jan 11 14:33:40 CET 2018
Hi Marcel,
as a matter of fact, there's a major change in the so called kaiser
patch (KPTI) for users who use KVM and linux guests. There i build a new
kernel 4.9.75 as of 06.01.2018. You have to patch the Host and the guest
though.
Good to hear that the unordered shutdown disappeared. I also don't have
unordered shutdowns using the new 389 base package.
Tuning the limits will sure help !
Rgds.
Franz
Am 2018-01-11 14:19, schrieb Marcel Bischoff:
> Hey Franz,
>
> what do you know — tonight there wasn't a disorderly shutdown. The main
> ingredient changed was a kernel update from 4.10.0-42-generic to
> 4.13.0-26-generic (a rather unusual jump), which was distributed
> through
> the main package sources. So this supports your theory about something
> amiss with the guest kernel.
>
> I will monitor the situation carefully. Slowly I re-build some
> confidence in this setup. Additionally, I will not touch Ubuntu again
> for new deployments. Not with a stick. The AppArmor issue (everything
> depends on it) broke the camels' back.
>
> Best,
> Marcel
>
> On 18/01/11, Skale, Franz wrote:
>> Hi Marcel,
>> i now checked my ldap server and also found some messages regarding
>> the ACL Plugin:
>> Jan 10 22:32:54 localhost ns-slapd[98615]:
>> [10/Jan/2018:22:32:54.579885565 +0100] connection - conn=2940 fd=284
>> Attempt to release connection that is not acquire
>> Jan 10 22:32:54 localhost ns-slapd[98615]:
>> [10/Jan/2018:22:32:54.585434274 +0100] connection - conn=4470 fd=188
>> Attempt to release connection that is not acquire
>> Jan 10 23:50:07 localhost ns-slapd[98615]:
>> [10/Jan/2018:23:50:07.863504579 +0100] NSACLPlugin -
>> acl_access_allowed: Resetting aclpb_pblock 0x7fa3a3fe6a60 to pblo
>> Jan 11 00:07:34 localhost ns-slapd[98615]:
>> [11/Jan/2018:00:07:34.557315481 +0100] NSACLPlugin -
>> acl_access_allowed: Resetting aclpb_pblock 0x7fa3a9ff2a60 to pblo
>> Jan 11 03:12:32 localhost ns-slapd[98615]:
>> [11/Jan/2018:03:12:32.383353274 +0100] NSACLPlugin -
>> acl_access_allowed: Resetting aclpb_pblock 0x7fa3aeffca60 to pblo
>> Jan 11 06:47:56 localhost ns-slapd[98615]:
>> [11/Jan/2018:06:47:56.284946442 +0100] NSACLPlugin -
>> acl_access_allowed: Resetting aclpb_pblock 0x7fa3a7feea60 to pblo
>> Jan 11 06:48:00 localhost ns-slapd[98615]:
>> [11/Jan/2018:06:48:00.364639406 +0100] NSACLPlugin -
>> acl_access_allowed: Resetting aclpb_pblock 0x7fa3ae7fba60 to pblo
>> Jan 11 07:53:34 localhost ns-slapd[98615]:
>> [11/Jan/2018:07:53:34.001520691 +0100] NSACLPlugin -
>> acl_access_allowed: Resetting aclpb_pblock 0x7fa3a17e1a60 to pblo
>> Jan 11 07:58:34 localhost ns-slapd[98615]:
>> [11/Jan/2018:07:58:34.641383768 +0100] connection - conn=3240 fd=278
>> Attempt to release connection that is not acquire
>> Jan 11 07:58:34 localhost ns-slapd[98615]:
>> [11/Jan/2018:07:58:34.646688065 +0100] connection - conn=0 fd=0
>> Attempt to release connection that is not acquired
>> But i have no unordered shutdown mentioned anywhere in the logs.
>> I also found out, that rasing the filelimit level doesn't work for the
>> dirsrv service.
>> Instead i raised it in the defaults config files:
>> /etc/default/dirsrv:
>> ulimit -n 65535
>> /etc/default/dirsrv at mailserver:
>> ulimit -n 65535
>> /etc/default/dirsrv.systemd:
>> # uncomment this line to raise the file descriptor limit
>> LimitNOFILE=65535
>> If your dirsrv shutdown unordered i personall think you have a problem
>> with either the host kernel or the guest kernel.
>> dirsrv is multithreaded and creates a thread for every connection
>> leaving alone filepointers it opens on demand.
>> So even on my testserver with no user created it consumes 200
>> filepointers after starting.
>>
>> Rgds.
>> Franz
>> Am 2018-01-10 22:05, schrieb Marcel Bischoff:
>>> Hi Franz,
>>>
>>> so much for trying to remove AppArmor:
>>>
>>> Reading package lists... Done
>>> Building dependency tree
>>> Reading state information... Done
>>> The following packages were automatically installed and are no
>>> longer required:
>>> 389-admin 389-admin-console 389-console 389-ds 389-ds-base
>>> 389-ds-base-libs 389-ds-console 389-ds-console-doc 389-dsgw
>>> amavisd-new aspell aspell-en augeas-lenses chwala
>>> clamav clamav-base clamav-daemon clamav-freshclam clamdscan
>>> cyrus-imapd dictionaries-common emacsen-common erlang-base
>>> erlang-crypto erlang-eimap erlang-goldrush erlang-lager
>>> erlang-lager-syslog erlang-syntax-tools fontconfig guam irony
>>> kolab-cli kolab-conf kolab-freebusy kolab-imap kolab-ldap kolab-mta
>>> kolab-saslauthd kolab-schema kolab-server
>>> kolab-syncroton kolab-webadmin kolab-xml ldap-utils libadminutil-data
>>> libadminutil0 libapache2-mod-nss libapache2-mod-php
>>> libapache2-mod-php7.0 libapparmor-perl libaspell15
>>> libaudio2 libaugeas0 libauthen-sasl-perl libavahi-client3
>>> libavahi-common-data libavahi-common3 libberkeleydb-perl
>>> libcalendaring libcgi-fast-perl libcgi-pm-perl libclamav7
>>> libconvert-binhex-perl libconvert-tnef-perl libconvert-uulib-perl
>>> libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libcups2
>>> libdigest-hmac-perl libds-admin-serv0
>>> libencode-locale-perl libevent-core-2.0-5 libfcgi-perl libgd3
>>> libhtml-parser-perl libhtml-tagset-perl libhtml-template-perl
>>> libhttp-date-perl libhttp-message-perl libical1a
>>> libidm-console-framework-java libio-html-perl libio-multiplex-perl
>>> libio-socket-inet6-perl libio-socket-ssl-perl libio-stringy-perl
>>> libjansson4 libjbig0 libjpeg-turbo8
>>> libjpeg8 libjss-java libkolab2 libkolabxml1v5 liblcms2-2 libldap-java
>>> libllvm3.6v5 liblwp-mediatypes-perl libmail-dkim-perl
>>> libmail-spf-perl
>>> libmailtools-perl libmcrypt4
>>> libmime-tools-perl libmng2 libmozilla-ldap-perl libmozldap-0d
>>> libnet-cidr-perl libnet-dns-perl libnet-ip-perl libnet-libidn-perl
>>> libnet-server-perl libnet-smtp-ssl-perl
>>> libnet-ssleay-perl libnetaddr-ip-perl libnss3-tools
>>> libperl4-corelibs-perl libqt4-dbus libqt4-declarative libqt4-network
>>> libqt4-script libqt4-sql libqt4-sql-mysql libqt4-xml
>>> libqt4-xmlpatterns libqtcore4 libqtdbus4 libqtgui4 libsctp1
>>> libsocket-getaddrinfo-perl libsocket6-perl libtiff5
>>> libunix-syslog-perl liburi-perl libvpx3 libxerces-c3.1
>>> libxslt1.1 libzend-framework-php libzephyr4 mozldap-tools
>>> mysql-client mysql-client-5.7 mysql-client-core-5.7
>>> mysql-server-core-5.7 pax php php-auth-sasl php-cli php-common
>>> php-curl php-gd php-http-request2 php-intl php-kolab php-kolabformat
>>> php-ldap php-mail php-mail-mime php-mail-mimedecode php-mbstring
>>> php-mcrypt php-mdb2
>>> php-mdb2-driver-mysql php-monolog php-mysql php-net-idna2
>>> php-net-ldap2 php-net-ldap3 php-net-sieve php-net-smtp php-net-socket
>>> php-net-url2 php-pear php-pspell php-psr-log
>>> php-sabre-dav-2.1 php-sabre-event php-sabre-http-3
>>> php-sabre-vobject-3 php-xml php7.0 php7.0-cli php7.0-common
>>> php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-json
>>> php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-opcache
>>> php7.0-pspell php7.0-readline php7.0-xml pykolab python-augeas
>>> python-cheetah python-dateutil
>>> python-gnupg python-icalendar python-kolab python-kolabformat
>>> python-ldap python-pkg-resources python-pyasn1 python-pyasn1-modules
>>> python-pymysql python-six python-sqlalchemy
>>> python-sqlalchemy-ext python-tz python-tzlocal qdbus qt-at-spi
>>> qtchooser qtcore4-l10n re2c roundcubemail roundcubemail-core
>>> roundcubemail-plugin-acl
>>> roundcubemail-plugin-archive roundcubemail-plugin-calendar
>>> roundcubemail-plugin-contextmenu
>>> roundcubemail-plugin-filesystem-attachments
>>> roundcubemail-plugin-jqueryui
>>> roundcubemail-plugin-kolab-activesync
>>> roundcubemail-plugin-kolab-addressbook
>>> roundcubemail-plugin-kolab-auth
>>> roundcubemail-plugin-kolab-config
>>> roundcubemail-plugin-kolab-delegation
>>> roundcubemail-plugin-kolab-files roundcubemail-plugin-kolab-folders
>>> roundcubemail-plugin-kolab-notes roundcubemail-plugin-kolab-tags
>>> roundcubemail-plugin-libcalendaring roundcubemail-plugin-libkolab
>>> roundcubemail-plugin-managesieve
>>> roundcubemail-plugin-newmail-notifier
>>> roundcubemail-plugin-odfviewer
>>> roundcubemail-plugin-password roundcubemail-plugin-pdfviewer
>>> roundcubemail-plugin-redundant-attachments
>>> roundcubemail-plugin-tasklist roundcubemail-plugin-zipdownload
>>> roundcubemail-plugins-kolab roundcubemail-skin-chameleon sa-compile
>>> smarty3 spamassassin spamc wallace zend-framework zend-framework-bin
>>> Use 'apt autoremove' to remove them.
>>> The following packages will be REMOVED:
>>> apparmor kolab kolab-webclient mysql-server mysql-server-5.7
>>> 0 upgraded, 0 newly installed, 5 to remove and 0 not upgraded.
>>> After this operation, 50.2 MB disk space will be freed.
>>> Do you want to continue? [Y/n]
>>>
>>> Which amounts to basically... everything.
>>>
>>> At least apparmor_status lets me know:
>>>
>>> apparmor module is loaded.
>>> 0 profiles are loaded.
>>> 0 profiles are in enforce mode.
>>> 0 profiles are in complain mode.
>>> 0 processes have profiles defined.
>>> 0 processes are in enforce mode.
>>> 0 processes are in complain mode.
>>> 0 processes are unconfined but have a profile defined.
>>>
>>> So that should be alright I guess.
>>>
>>> I have raised the limits and will monitor the outcome. Hopefully
>>> things
>>> will quiet down now.
>>>
>>> Best,
>>> Marcel
>>>
>>> On 18/01/10, Skale, Franz wrote:
>>>> Hi Marcel,
>>>> I would deactivate apparmor.
>>>> Also i find that your ulimit -a output is wrong.
>>>> You should raise the open files to 65k depending how much users you
>>>> have.
>>>> 1024 is too small i guess.
>>>> Consider this as a starting point:
>>>> http://directory.fedoraproject.org/docs/389ds/FAQ/performance-tuning.html#linux
>>>> Since you've a KVM guest, do you use PV or HVM ?
>>>> Did you install a PTI kernel on the host ?
>>>> If so, you should use a PTI kernel in the guest too.
>>>> Jan 7 18:10:46 localhost kernel: [ 0.000000] Kernel/User page
>>>> tables isolation: enabled e.g (using 4.9.75).
>>>> Just a thought.
>>>>
>>>>
>>>> Rgds.
>>>> Franz
>>>>
>>>>
>>>> Am 2018-01-10 16:50, schrieb Marcel Bischoff:
>>>>> I have been able to pull the kernel messages from the logwatch
>>>>> output,
>>>>> didn't think of this before. Maybe it helps in homing in on the
>>>>> cause. I
>>>>> couldn't spot something obvious though. Maybe AppArmor does
>>>>> something
>>>>> undesirable? I remember running into issues with it years ago in
>>>>> another
>>>>> context.
>>>>>
>>>>> I will uninstall it tonight, reboot the server and report on my
>>>>> progress
>>>>> (or lack thereof).
>>>>>
>>>>> Thanks again for bearing with me!
>>>>>
>>>>> --------------------- Kernel Begin ------------------------
>>>>>
>>>>>
>>>>> 1 Time(s): #2
>>>>> 1 Time(s): #3
>>>>> 1 Time(s): 1 disabled
>>>>> 1 Time(s): 2 disabled
>>>>> 1 Time(s): 3 disabled
>>>>> 1 Time(s): 4 disabled
>>>>> 1 Time(s): 5 disabled
>>>>> 1 Time(s): 6 disabled
>>>>> 1 Time(s): 7 disabled
>>>>> 1 Time(s): ACPI: 1 ACPI AML tables successfully acquired and loaded
>>>>> 1 Time(s): ACPI: Added _OSI(Module Device)
>>>>> 1 Time(s): ACPI: Added _OSI(Processor Aggregator Device)
>>>>> 1 Time(s): ACPI: Added _OSI(Processor Device)
>>>>> 1 Time(s): ACPI: Early table checksum verification disabled
>>>>> 1 Time(s): ACPI: IRQ11 used by override.
>>>>> 1 Time(s): ACPI: IRQ5 used by override.
>>>>> 1 Time(s): ACPI: IRQ9 used by override.
>>>>> 1 Time(s): ACPI: Interpreter enabled
>>>>> 1 Time(s): ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
>>>>> 1 Time(s): ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
>>>>> 1 Time(s): ACPI: Power Button [PWRF]
>>>>> 1 Time(s): ACPI: Using IOAPIC for interrupt routing
>>>>> 1 Time(s): ACPI: bus type PCI registered
>>>>> 1 Time(s): ACPI: bus type USB registered
>>>>> 1 Time(s): AES CTR mode by8 optimization enabled
>>>>> 1 Time(s): AMD AuthenticAMD
>>>>> 1 Time(s): AVX version of gcm_enc/dec engaged.
>>>>> 1 Time(s): AppArmor: AppArmor Filesystem Enabled
>>>>> 1 Time(s): AppArmor: AppArmor initialized
>>>>> 1 Time(s): AppArmor: AppArmor sha1 policy hashing enabled
>>>>> 1 Time(s): Booting paravirtualized kernel on KVM
>>>>> 1 Time(s): Btrfs loaded, crc32c=crc32c-intel
>>>>> 1 Time(s): Build-time adjustment of leaf fanout to 64.
>>>>> 1 Time(s): Built 1 zonelists in Node order, mobility grouping on.
>>>>> Total pages: 4128613
>>>>> 1 Time(s): Calgary: Unable to locate Rio Grande table in EBDA -
>>>>> bailing!
>>>>> 1 Time(s): Calgary: detecting Calgary via BIOS EBDA area
>>>>> 1 Time(s): Calibrating delay loop (skipped) preset value.. 4199.99
>>>>> BogoMIPS (lpj=8399992)
>>>>> 1 Time(s): Centaur CentaurHauls
>>>>> 1 Time(s): DMA zone: 21 pages reserved
>>>>> 1 Time(s): DMA zone: 64 pages used for memmap
>>>>> 1 Time(s): DMA32 zone: 12224 pages used for memmap
>>>>> 1 Time(s): Device empty
>>>>> 1 Time(s): EDD information not available.
>>>>> 1 Time(s): EXT4-fs (sda1): mounted filesystem with ordered data
>>>>> mode.
>>>>> Opts: (null)
>>>>> 1 Time(s): EXT4-fs (sda1): re-mounted. Opts: discard
>>>>> 1 Time(s): Early memory node ranges
>>>>> 1 Time(s): Freeing SMP alternatives memory: 32K
>>>>> 1 Time(s): Freeing unused kernel memory: 1156K
>>>>> 1 Time(s): Freeing unused kernel memory: 2228K
>>>>> 1 Time(s): Freeing unused kernel memory: 268K
>>>>> 1 Time(s): GHES: HEST is not enabled!
>>>>> 1 Time(s): Hierarchical RCU implementation.
>>>>> 1 Time(s): Hypervisor detected: KVM
>>>>> 1 Time(s): Initialise system trusted keyrings
>>>>> 1 Time(s): Intel GenuineIntel
>>>>> 1 Time(s): KERNEL supported cpus:
>>>>> 1 Time(s): KVM setup async PF for cpu 1
>>>>> 1 Time(s): KVM setup async PF for cpu 2
>>>>> 1 Time(s): KVM setup async PF for cpu 3
>>>>> 1 Time(s): Key type asymmetric registered
>>>>> 1 Time(s): Key type big_key registered
>>>>> 1 Time(s): Key type dns_resolver registered
>>>>> 1 Time(s): Key type encrypted registered
>>>>> 1 Time(s): Key type trusted registered
>>>>> 1 Time(s): MTRR default type: write-back
>>>>> 1 Time(s): MTRR fixed ranges enabled:
>>>>> 1 Time(s): MTRR variable ranges enabled:
>>>>> 1 Time(s): Magic number: 2:724:141
>>>>> 1 Time(s): Mount-cache hash table entries: 32768 (order: 6, 262144
>>>>> bytes)
>>>>> 1 Time(s): Mountpoint-cache hash table entries: 32768 (order: 6,
>>>>> 262144 bytes)
>>>>> 1 Time(s): Movable zone start for each node
>>>>> 1 Time(s): NET: Registered protocol family 1
>>>>> 1 Time(s): NET: Registered protocol family 16
>>>>> 1 Time(s): NET: Registered protocol family 17
>>>>> 1 Time(s): NET: Registered protocol family 2
>>>>> 1 Time(s): NR_IRQS:524544 nr_irqs:456 16
>>>>> 1 Time(s): NX (Execute Disable) protection: active
>>>>> 1 Time(s): NetLabel: domain hash size = 128
>>>>> 1 Time(s): NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
>>>>> 1 Time(s): NetLabel: unlabeled traffic allowed by default
>>>>> 1 Time(s): NetLabel: Initializing
>>>>> 1 Time(s): No NUMA configuration found
>>>>> 1 Time(s): Normal zone: 53248 pages used for memmap
>>>>> 1 Time(s): PCCT header not found.
>>>>> 1 Time(s): PCI-DMA: Using software bounce buffering for IO
>>>>> (SWIOTLB)
>>>>> 1 Time(s): PCI: Using ACPI for IRQ routing
>>>>> 1 Time(s): PCI: Using configuration type 1 for base access
>>>>> 1 Time(s): PCI: Using host bridge windows from ACPI; if
>>>>> necessary, use
>>>>> "pci=nocrs" and report a bug
>>>>> 1 Time(s): PCI: pci_cache_line_size set to 64 bytes
>>>>> 1 Time(s): PM: Hibernation image not present or could not be
>>>>> loaded.
>>>>> 1 Time(s): PPP generic driver version 2.4.2
>>>>> 1 Time(s): Performance Events: unsupported p6 CPU model 42 no PMU
>>>>> driver, software events only.
>>>>> 1 Time(s): Policy zone: Normal
>>>>> 2 Time(s): Process accounting resumed
>>>>> 1 Time(s): RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4.
>>>>> 1 Time(s): RCU: Adjusting geometry for rcu_fanout_leaf=64,
>>>>> nr_cpu_ids=4
>>>>> 1 Time(s): SCSI subsystem initialized
>>>>> 1 Time(s): SMBIOS 2.8 present.
>>>>> 1 Time(s): Scanning 1 areas for low memory corruption
>>>>> 1 Time(s): Security Framework initialized
>>>>> 1 Time(s): Segment Routing with IPv6
>>>>> 1 Time(s): Switched APIC routing to physical x2apic.
>>>>> 1 Time(s): TSC deadline timer enabled
>>>>> 1 Time(s): UDP hash table entries: 8192 (order: 6, 262144 bytes)
>>>>> 1 Time(s): UDP-Lite hash table entries: 8192 (order: 6, 262144
>>>>> bytes)
>>>>> 1 Time(s): Unpacking initramfs...
>>>>> 1 Time(s): Using ACPI (MADT) for SMP configuration information
>>>>> 1 Time(s): Write protecting the kernel read-only data: 14336k
>>>>> 1 Time(s): Yama: becoming mindful.
>>>>> 1 Time(s): Zone ranges:
>>>>> 1 Time(s): acpi device:12: hash matches
>>>>> 1 Time(s): acpiphp: Slot [11] registered
>>>>> 1 Time(s): acpiphp: Slot [12] registered
>>>>> 1 Time(s): acpiphp: Slot [13] registered
>>>>> 1 Time(s): acpiphp: Slot [14] registered
>>>>> 1 Time(s): acpiphp: Slot [15] registered
>>>>> 1 Time(s): acpiphp: Slot [16] registered
>>>>> 1 Time(s): acpiphp: Slot [17] registered
>>>>> 1 Time(s): acpiphp: Slot [18] registered
>>>>> 1 Time(s): acpiphp: Slot [19] registered
>>>>> 1 Time(s): acpiphp: Slot [21] registered
>>>>> 1 Time(s): acpiphp: Slot [22] registered
>>>>> 1 Time(s): acpiphp: Slot [23] registered
>>>>> 1 Time(s): acpiphp: Slot [24] registered
>>>>> 1 Time(s): acpiphp: Slot [25] registered
>>>>> 1 Time(s): acpiphp: Slot [26] registered
>>>>> 1 Time(s): acpiphp: Slot [27] registered
>>>>> 1 Time(s): acpiphp: Slot [28] registered
>>>>> 1 Time(s): acpiphp: Slot [29] registered
>>>>> 1 Time(s): acpiphp: Slot [31] registered
>>>>> 1 Time(s): acpiphp: Slot [3] registered
>>>>> 1 Time(s): acpiphp: Slot [4] registered
>>>>> 1 Time(s): acpiphp: Slot [5] registered
>>>>> 1 Time(s): acpiphp: Slot [6] registered
>>>>> 1 Time(s): acpiphp: Slot [7] registered
>>>>> 1 Time(s): acpiphp: Slot [8] registered
>>>>> 1 Time(s): acpiphp: Slot [9] registered
>>>>> 1 Time(s): async_tx: api initialized (async)
>>>>> 1 Time(s): audit: initializing netlink subsys (disabled)
>>>>> 1 Time(s): clocksource: Switched to clocksource kvm-clock
>>>>> 1 Time(s): cpuidle: using governor ladder
>>>>> 1 Time(s): cpuidle: using governor menu
>>>>> 1 Time(s): devtmpfs: initialized
>>>>> 1 Time(s): ehci-pci: EHCI PCI platform driver
>>>>> 1 Time(s): ehci-platform: EHCI generic platform driver
>>>>> 1 Time(s): evm: security.SMACK64
>>>>> 1 Time(s): evm: security.SMACK64EXEC
>>>>> 1 Time(s): evm: security.SMACK64MMAP
>>>>> 1 Time(s): evm: security.SMACK64TRANSMUTE
>>>>> 1 Time(s): evm: security.capability
>>>>> 1 Time(s): evm: security.ima
>>>>> 1 Time(s): evm: security.selinux
>>>>> 1 Time(s): ftrace: allocating 34227 entries in 134 pages
>>>>> 1 Time(s): fuse init (API version 7.26)
>>>>> 1 Time(s): hidraw: raw HID events driver (C) Jiri Kosina
>>>>> 1 Time(s): hpet clockevent registered
>>>>> 1 Time(s): i2c /dev entries driver
>>>>> 1 Time(s): ima: No TPM chip found, activating TPM-bypass! (rc=-19)
>>>>> 1 Time(s): intel_idle: does not run on family 6 model 42
>>>>> 1 Time(s): io scheduler cfq registered
>>>>> 1 Time(s): io scheduler deadline registered
>>>>> 1 Time(s): io scheduler noop registered (default)
>>>>> 1 Time(s): ledtrig-cpu: registered to indicate activity on CPUs
>>>>> 1 Time(s): libphy: Fixed MDIO Bus: probed
>>>>> 1 Time(s): loop: module loaded
>>>>> 1 Time(s): mousedev: PS/2 mouse device common for all mice
>>>>> 1 Time(s): ohci-pci: OHCI PCI platform driver
>>>>> 1 Time(s): ohci-platform: OHCI generic platform driver
>>>>> 1 Time(s): ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
>>>>> 1 Time(s): pinctrl core: initialized pinctrl subsystem
>>>>> 1 Time(s): pnp: PnP ACPI init
>>>>> 1 Time(s): pnp: PnP ACPI: found 5 devices
>>>>> 1 Time(s): ppdev: user-space parallel port driver
>>>>> 1 Time(s): raid6: .... xor() 6424 MB/s, rmw enabled
>>>>> 1 Time(s): raid6: sse2x1 gen() 6723 MB/s
>>>>> 1 Time(s): raid6: sse2x1 xor() 5185 MB/s
>>>>> 1 Time(s): raid6: sse2x2 gen() 8399 MB/s
>>>>> 1 Time(s): raid6: sse2x2 xor() 5585 MB/s
>>>>> 1 Time(s): raid6: sse2x4 gen() 9942 MB/s
>>>>> 1 Time(s): raid6: sse2x4 xor() 6424 MB/s
>>>>> 1 Time(s): raid6: using algorithm sse2x4 gen() 9942 MB/s
>>>>> 1 Time(s): raid6: using ssse3x2 recovery algorithm
>>>>> 1 Time(s): random: crng init done
>>>>> 1 Time(s): random: fast init done
>>>>> 8 Time(s): random: systemd-udevd: uninitialized urandom read (16
>>>>> bytes read)
>>>>> 2 Time(s): random: udevadm: uninitialized urandom read (16 bytes
>>>>> read)
>>>>> 1 Time(s): registered taskstats version 1
>>>>> 1 Time(s): scsi host1: ata_piix
>>>>> 1 Time(s): scsi host2: Virtio SCSI HBA
>>>>> 1 Time(s): sda: sda1
>>>>> 1 Time(s): setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4
>>>>> nr_cpu_ids:4
>>>>> nr_node_ids:1
>>>>> 1 Time(s): smp: Bringing up secondary CPUs ...
>>>>> 1 Time(s): smp: Brought up 1 node, 4 CPUs
>>>>> 1 Time(s): smpboot: Max logical packages: 1
>>>>> 1 Time(s): smpboot: Total of 4 processors activated (16799.98
>>>>> BogoMIPS)
>>>>> 1 Time(s): tun: Universal TUN/TAP device driver, 1.6
>>>>> 1 Time(s): uhci_hcd: USB Universal Host Controller Interface driver
>>>>> 1 Time(s): usb 1-1: Manufacturer: QEMU
>>>>> 1 Time(s): usb 1-1: New USB device strings: Mfr=1, Product=3,
>>>>> SerialNumber=5
>>>>> 1 Time(s): usb 1-1: Product: QEMU USB Tablet
>>>>> 1 Time(s): usb 1-1: SerialNumber: 42
>>>>> 1 Time(s): usb 1-1: new full-speed USB device number 2 using
>>>>> uhci_hcd
>>>>> 1 Time(s): usb usb1: New USB device strings: Mfr=3, Product=2,
>>>>> SerialNumber=1
>>>>> 1 Time(s): usb usb1: Product: UHCI Host Controller
>>>>> 1 Time(s): usbcore: registered new device driver usb
>>>>> 1 Time(s): usbcore: registered new interface driver hub
>>>>> 1 Time(s): usbcore: registered new interface driver usbfs
>>>>> 1 Time(s): usbcore: registered new interface driver usbhid
>>>>> 1 Time(s): usbhid: USB HID core driver
>>>>> 1 Time(s): vgaarb: loaded
>>>>> 1 Time(s): x2apic enabled
>>>>> 1 Time(s): x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256
>>>>> 1 Time(s): x86/mm: Checked W+X mappings: passed, no W+X pages
>>>>> found.
>>>>> 1 Time(s): x86/mm: Memory block size: 128MB
>>>>> 1 Time(s): x86: Booting SMP configuration:
>>>>> 1 Time(s): xor: automatically using best checksumming function
>>>>> avx
>>>>> 1 Time(s): zbud: loaded
>>>>> 1 Time(s): zswap: loaded using pool lzo/zbud
>>>>>
>>>>> ---------------------- Kernel End -------------------------
>>>>>
>>>>> On 18/01/10, Marcel Bischoff wrote:
>>>>>> On 18/01/10, Skale, Franz wrote:
>>>>>>> 06:21 is the lograotation, so no problem. Same by me.
>>>>>>
>>>>>> A bit reassuring but still: shouldn't the service cleanly restart
>>>>>> instead of barfing "Disorderly Shutdown"?
>>>>>>
>>>>>>> What strucks me is, that it seems that ns-slapd as to reallocate
>>>>>>> memory.
>>>>>>> How much memory does your server have ?
>>>>>>> send free -m
>>>>>>
>>>>>> $ free -m
>>>>>> total used free shared buff/cache
>>>>>> available
>>>>>> Mem: 16045 1304 13096 56
>>>>>> 1644 14371
>>>>>> Swap: 0 0 0
>>>>>>
>>>>>> No problem I can see there.
>>>>>>
>>>>>>> Do you have selinux enabled !
>>>>>>> If so, disable it by adding selinux=0 to /etc/default/grub
>>>>>>> and rerun
>>>>>>> update-grub.
>>>>>>
>>>>>> No, not enabled.
>>>>>>
>>>>>>> Send the kernel version: uname -a
>>>>>>
>>>>>> Linux mx.example.com 4.10.0-42-generic #46~16.04.1-Ubuntu SMP Mon
>>>>>> Dec 4
>>>>>> 15:57:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
>>>>>>
>>>>>>> How much open file handles to your system allow per process ?
>>>>>>> send: ulimit -a
>>>>>>
>>>>>> $ ulimit -a
>>>>>> Maximum size of core files created (kB,
>>>>>> -c) 0
>>>>>> Maximum size of a process’s data segment (kB,
>>>>>> -d) unlimited
>>>>>> Maximum size of files created by the shell (kB,
>>>>>> -f) unlimited
>>>>>> Maximum size that may be locked into memory (kB,
>>>>>> -l) 64
>>>>>> Maximum resident set size (kB,
>>>>>> -m) unlimited
>>>>>> Maximum number of open file descriptors
>>>>>> (-n) 1024
>>>>>> Maximum stack size (kB,
>>>>>> -s) 8192
>>>>>> Maximum amount of cpu time in seconds (seconds,
>>>>>> -t) unlimited
>>>>>> Maximum number of processes available to a single user
>>>>>> (-u) 64015
>>>>>> Maximum amount of virtual memory available to the shell (kB,
>>>>>> -v) unlimited
>>>>>>
>>>>>>> send dmesg: (is there a segfault).
>>>>>>
>>>>>> The whole dmesg output is spammed by ufw and contains no useful
>>>>>> information whatsoever.
>>>>>>
>>>>>>> It really could be, that you have a failing memory module:
>>>>>>> send dmidecode
>>>>>>
>>>>>> I don't think this is likely as this is a virtual server.
>>>>>>
>>>>>> $ dmidecode
>>>>>> # dmidecode 3.0
>>>>>> Getting SMBIOS data from sysfs.
>>>>>> SMBIOS 2.8 present.
>>>>>> 10 structures occupying 408 bytes.
>>>>>> Table at 0x000F68A0.
>>>>>>
>>>>>> Handle 0x0000, DMI type 0, 24 bytes
>>>>>> BIOS Information
>>>>>> Vendor: SeaBIOS
>>>>>> Version: 1.10.2
>>>>>> Release Date: 04/01/2014
>>>>>> Address: 0xE8000
>>>>>> Runtime Size: 96 kB
>>>>>> ROM Size: 64 kB
>>>>>> Characteristics:
>>>>>> BIOS characteristics not supported
>>>>>> Targeted content distribution is supported
>>>>>> BIOS Revision: 0.0
>>>>>>
>>>>>> Handle 0x0100, DMI type 1, 27 bytes
>>>>>> System Information
>>>>>> Manufacturer: Hetzner
>>>>>> Product Name: vServer
>>>>>> Version: 2
>>>>>> Serial Number: Not Specified
>>>>>> UUID: A8236400-D36B-0135-FE8F-10BF48D7F2C6
>>>>>> Wake-up Type: Power Switch
>>>>>> SKU Number: a8236400-d36b-0135-fe8f-10bf48d7f2c6
>>>>>> Family: Not Specified
>>>>>>
>>>>>> Handle 0x0300, DMI type 3, 21 bytes
>>>>>> Chassis Information
>>>>>> Manufacturer: QEMU
>>>>>> Type: Other
>>>>>> Lock: Not Present
>>>>>> Version: pc-i440fx-2.10
>>>>>> Serial Number: Not Specified
>>>>>> Asset Tag: Not Specified
>>>>>> Boot-up State: Safe
>>>>>> Power Supply State: Safe
>>>>>> Thermal State: Safe
>>>>>> Security Status: Unknown
>>>>>> OEM Information: 0x00000000
>>>>>> Height: Unspecified
>>>>>> Number Of Power Cords: Unspecified
>>>>>> Contained Elements: 0
>>>>>>
>>>>>> Handle 0x0400, DMI type 4, 42 bytes
>>>>>> Processor Information
>>>>>> Socket Designation: CPU 0
>>>>>> Type: Central Processor
>>>>>> Family: Other
>>>>>> Manufacturer: QEMU
>>>>>> ID: A1 06 02 00 FF FB 8B 07
>>>>>> Version: pc-i440fx-2.10
>>>>>> Voltage: Unknown
>>>>>> External Clock: Unknown
>>>>>> Max Speed: 2000 MHz
>>>>>> Current Speed: 2000 MHz
>>>>>> Status: Populated, Enabled
>>>>>> Upgrade: Other
>>>>>> L1 Cache Handle: Not Provided
>>>>>> L2 Cache Handle: Not Provided
>>>>>> L3 Cache Handle: Not Provided
>>>>>> Serial Number: Not Specified
>>>>>> Asset Tag: Not Specified
>>>>>> Part Number: Not Specified
>>>>>> Core Count: 4
>>>>>> Core Enabled: 4
>>>>>> Thread Count: 1
>>>>>> Characteristics: None
>>>>>>
>>>>>> Handle 0x1000, DMI type 16, 23 bytes
>>>>>> Physical Memory Array
>>>>>> Location: Other
>>>>>> Use: System Memory
>>>>>> Error Correction Type: Multi-bit ECC
>>>>>> Maximum Capacity: 16 GB
>>>>>> Error Information Handle: Not Provided
>>>>>> Number Of Devices: 1
>>>>>>
>>>>>> Handle 0x1100, DMI type 17, 40 bytes
>>>>>> Memory Device
>>>>>> Array Handle: 0x1000
>>>>>> Error Information Handle: Not Provided
>>>>>> Total Width: Unknown
>>>>>> Data Width: Unknown
>>>>>> Size: 16384 MB
>>>>>> Form Factor: DIMM
>>>>>> Set: None
>>>>>> Locator: DIMM 0
>>>>>> Bank Locator: Not Specified
>>>>>> Type: RAM
>>>>>> Type Detail: Other
>>>>>> Speed: Unknown
>>>>>> Manufacturer: QEMU
>>>>>> Serial Number: Not Specified
>>>>>> Asset Tag: Not Specified
>>>>>> Part Number: Not Specified
>>>>>> Rank: Unknown
>>>>>> Configured Clock Speed: Unknown
>>>>>> Minimum Voltage: Unknown
>>>>>> Maximum Voltage: Unknown
>>>>>> Configured Voltage: Unknown
>>>>>>
>>>>>> Handle 0x1300, DMI type 19, 31 bytes
>>>>>> Memory Array Mapped Address
>>>>>> Starting Address: 0x00000000000
>>>>>> Ending Address: 0x000BFFFFFFF
>>>>>> Range Size: 3 GB
>>>>>> Physical Array Handle: 0x1000
>>>>>> Partition Width: 1
>>>>>>
>>>>>> Handle 0x1301, DMI type 19, 31 bytes
>>>>>> Memory Array Mapped Address
>>>>>> Starting Address: 0x00100000000
>>>>>> Ending Address: 0x0043FFFFFFF
>>>>>> Range Size: 13 GB
>>>>>> Physical Array Handle: 0x1000
>>>>>> Partition Width: 1
>>>>>>
>>>>>> Handle 0x2000, DMI type 32, 11 bytes
>>>>>> System Boot Information
>>>>>> Status: No errors detected
>>>>>>
>>>>>> Handle 0x7F00, DMI type 127, 4 bytes
>>>>>> End Of Table
>>>>>>
>>>>>>> Did you update your kernel days ago, if so, you sure ran
>>>>>>> into a buggy
>>>>>>> kernel 4.9.65.
>>>>>>> I built a 4.9.75 PTI enabled kernel which i send you to test.
>>>>>>
>>>>>> 4.10.0-42-generic
>>>>>>
>>>>>>> Office 365 would be a bad and expensive choice.
>>>>>>
>>>>>> I agree. I'd very much like to avoid it but when Kolab turn out to
>>>>>> have
>>>>>> issues with the current setup, I doubt I'll get another shot.
>>>>>>
>>>>>> Best,
>>>>>> Marcel
More information about the users
mailing list