LDAP server unavailable: SERVER_DOWN
Marcel Bischoff
marcel at herrbischoff.com
Thu Jan 11 16:06:58 CET 2018
Hey Franz,
I adjusted the limits and hope for the best now. Thanks again for taking
the time to troubleshoot this with me!
Best,
Marcel
On 18/01/11, Skale, Franz wrote:
>Hi Marcel,
>as a matter of fact, there's a major change in the so called kaiser
>patch (KPTI) for users who use KVM and linux guests. There i build a
>new kernel 4.9.75 as of 06.01.2018. You have to patch the Host and the
>guest though.
>Good to hear that the unordered shutdown disappeared. I also don't
>have unordered shutdowns using the new 389 base package.
>Tuning the limits will sure help !
>
>Rgds.
>Franz
>
>Am 2018-01-11 14:19, schrieb Marcel Bischoff:
>>Hey Franz,
>>
>>what do you know — tonight there wasn't a disorderly shutdown. The main
>>ingredient changed was a kernel update from 4.10.0-42-generic to
>>4.13.0-26-generic (a rather unusual jump), which was distributed
>>through
>>the main package sources. So this supports your theory about something
>>amiss with the guest kernel.
>>
>>I will monitor the situation carefully. Slowly I re-build some
>>confidence in this setup. Additionally, I will not touch Ubuntu again
>>for new deployments. Not with a stick. The AppArmor issue (everything
>>depends on it) broke the camels' back.
>>
>>Best,
>>Marcel
>>
>>On 18/01/11, Skale, Franz wrote:
>>>Hi Marcel,
>>>i now checked my ldap server and also found some messages regarding
>>>the ACL Plugin:
>>>Jan 10 22:32:54 localhost ns-slapd[98615]:
>>>[10/Jan/2018:22:32:54.579885565 +0100] connection - conn=2940 fd=284
>>>Attempt to release connection that is not acquire
>>>Jan 10 22:32:54 localhost ns-slapd[98615]:
>>>[10/Jan/2018:22:32:54.585434274 +0100] connection - conn=4470 fd=188
>>>Attempt to release connection that is not acquire
>>>Jan 10 23:50:07 localhost ns-slapd[98615]:
>>>[10/Jan/2018:23:50:07.863504579 +0100] NSACLPlugin -
>>>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a3fe6a60 to pblo
>>>Jan 11 00:07:34 localhost ns-slapd[98615]:
>>>[11/Jan/2018:00:07:34.557315481 +0100] NSACLPlugin -
>>>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a9ff2a60 to pblo
>>>Jan 11 03:12:32 localhost ns-slapd[98615]:
>>>[11/Jan/2018:03:12:32.383353274 +0100] NSACLPlugin -
>>>acl_access_allowed: Resetting aclpb_pblock 0x7fa3aeffca60 to pblo
>>>Jan 11 06:47:56 localhost ns-slapd[98615]:
>>>[11/Jan/2018:06:47:56.284946442 +0100] NSACLPlugin -
>>>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a7feea60 to pblo
>>>Jan 11 06:48:00 localhost ns-slapd[98615]:
>>>[11/Jan/2018:06:48:00.364639406 +0100] NSACLPlugin -
>>>acl_access_allowed: Resetting aclpb_pblock 0x7fa3ae7fba60 to pblo
>>>Jan 11 07:53:34 localhost ns-slapd[98615]:
>>>[11/Jan/2018:07:53:34.001520691 +0100] NSACLPlugin -
>>>acl_access_allowed: Resetting aclpb_pblock 0x7fa3a17e1a60 to pblo
>>>Jan 11 07:58:34 localhost ns-slapd[98615]:
>>>[11/Jan/2018:07:58:34.641383768 +0100] connection - conn=3240 fd=278
>>>Attempt to release connection that is not acquire
>>>Jan 11 07:58:34 localhost ns-slapd[98615]:
>>>[11/Jan/2018:07:58:34.646688065 +0100] connection - conn=0 fd=0
>>>Attempt to release connection that is not acquired
>>>But i have no unordered shutdown mentioned anywhere in the logs.
>>>I also found out, that rasing the filelimit level doesn't work for the
>>>dirsrv service.
>>>Instead i raised it in the defaults config files:
>>>/etc/default/dirsrv:
>>>ulimit -n 65535
>>>/etc/default/dirsrv at mailserver:
>>>ulimit -n 65535
>>>/etc/default/dirsrv.systemd:
>>># uncomment this line to raise the file descriptor limit
>>>LimitNOFILE=65535
>>>If your dirsrv shutdown unordered i personall think you have a problem
>>>with either the host kernel or the guest kernel.
>>>dirsrv is multithreaded and creates a thread for every connection
>>>leaving alone filepointers it opens on demand.
>>>So even on my testserver with no user created it consumes 200
>>>filepointers after starting.
>>>
>>>Rgds.
>>>Franz
>>>Am 2018-01-10 22:05, schrieb Marcel Bischoff:
>>>>Hi Franz,
>>>>
>>>>so much for trying to remove AppArmor:
>>>>
>>>>Reading package lists... Done
>>>>Building dependency tree
>>>>Reading state information... Done
>>>>The following packages were automatically installed and are no
>>>>longer required:
>>>>389-admin 389-admin-console 389-console 389-ds 389-ds-base
>>>>389-ds-base-libs 389-ds-console 389-ds-console-doc 389-dsgw
>>>>amavisd-new aspell aspell-en augeas-lenses chwala
>>>>clamav clamav-base clamav-daemon clamav-freshclam clamdscan
>>>>cyrus-imapd dictionaries-common emacsen-common erlang-base
>>>>erlang-crypto erlang-eimap erlang-goldrush erlang-lager
>>>>erlang-lager-syslog erlang-syntax-tools fontconfig guam irony
>>>>kolab-cli kolab-conf kolab-freebusy kolab-imap kolab-ldap kolab-mta
>>>>kolab-saslauthd kolab-schema kolab-server
>>>>kolab-syncroton kolab-webadmin kolab-xml ldap-utils libadminutil-data
>>>>libadminutil0 libapache2-mod-nss libapache2-mod-php
>>>>libapache2-mod-php7.0 libapparmor-perl libaspell15
>>>>libaudio2 libaugeas0 libauthen-sasl-perl libavahi-client3
>>>>libavahi-common-data libavahi-common3 libberkeleydb-perl
>>>>libcalendaring libcgi-fast-perl libcgi-pm-perl libclamav7
>>>>libconvert-binhex-perl libconvert-tnef-perl libconvert-uulib-perl
>>>>libcrypt-openssl-bignum-perl libcrypt-openssl-rsa-perl libcups2
>>>>libdigest-hmac-perl libds-admin-serv0
>>>>libencode-locale-perl libevent-core-2.0-5 libfcgi-perl libgd3
>>>>libhtml-parser-perl libhtml-tagset-perl libhtml-template-perl
>>>>libhttp-date-perl libhttp-message-perl libical1a
>>>>libidm-console-framework-java libio-html-perl libio-multiplex-perl
>>>>libio-socket-inet6-perl libio-socket-ssl-perl libio-stringy-perl
>>>>libjansson4 libjbig0 libjpeg-turbo8
>>>>libjpeg8 libjss-java libkolab2 libkolabxml1v5 liblcms2-2 libldap-java
>>>>libllvm3.6v5 liblwp-mediatypes-perl libmail-dkim-perl
>>>>libmail-spf-perl
>>>>libmailtools-perl libmcrypt4
>>>>libmime-tools-perl libmng2 libmozilla-ldap-perl libmozldap-0d
>>>>libnet-cidr-perl libnet-dns-perl libnet-ip-perl libnet-libidn-perl
>>>>libnet-server-perl libnet-smtp-ssl-perl
>>>>libnet-ssleay-perl libnetaddr-ip-perl libnss3-tools
>>>>libperl4-corelibs-perl libqt4-dbus libqt4-declarative libqt4-network
>>>>libqt4-script libqt4-sql libqt4-sql-mysql libqt4-xml
>>>>libqt4-xmlpatterns libqtcore4 libqtdbus4 libqtgui4 libsctp1
>>>>libsocket-getaddrinfo-perl libsocket6-perl libtiff5
>>>>libunix-syslog-perl liburi-perl libvpx3 libxerces-c3.1
>>>>libxslt1.1 libzend-framework-php libzephyr4 mozldap-tools
>>>>mysql-client mysql-client-5.7 mysql-client-core-5.7
>>>>mysql-server-core-5.7 pax php php-auth-sasl php-cli php-common
>>>>php-curl php-gd php-http-request2 php-intl php-kolab php-kolabformat
>>>>php-ldap php-mail php-mail-mime php-mail-mimedecode php-mbstring
>>>>php-mcrypt php-mdb2
>>>>php-mdb2-driver-mysql php-monolog php-mysql php-net-idna2
>>>>php-net-ldap2 php-net-ldap3 php-net-sieve php-net-smtp php-net-socket
>>>>php-net-url2 php-pear php-pspell php-psr-log
>>>>php-sabre-dav-2.1 php-sabre-event php-sabre-http-3
>>>>php-sabre-vobject-3 php-xml php7.0 php7.0-cli php7.0-common
>>>>php7.0-curl php7.0-fpm php7.0-gd php7.0-intl php7.0-json
>>>>php7.0-ldap php7.0-mbstring php7.0-mcrypt php7.0-mysql php7.0-opcache
>>>>php7.0-pspell php7.0-readline php7.0-xml pykolab python-augeas
>>>>python-cheetah python-dateutil
>>>>python-gnupg python-icalendar python-kolab python-kolabformat
>>>>python-ldap python-pkg-resources python-pyasn1 python-pyasn1-modules
>>>>python-pymysql python-six python-sqlalchemy
>>>>python-sqlalchemy-ext python-tz python-tzlocal qdbus qt-at-spi
>>>>qtchooser qtcore4-l10n re2c roundcubemail roundcubemail-core
>>>>roundcubemail-plugin-acl
>>>>roundcubemail-plugin-archive roundcubemail-plugin-calendar
>>>>roundcubemail-plugin-contextmenu
>>>>roundcubemail-plugin-filesystem-attachments
>>>>roundcubemail-plugin-jqueryui
>>>>roundcubemail-plugin-kolab-activesync
>>>>roundcubemail-plugin-kolab-addressbook
>>>>roundcubemail-plugin-kolab-auth
>>>>roundcubemail-plugin-kolab-config
>>>>roundcubemail-plugin-kolab-delegation
>>>>roundcubemail-plugin-kolab-files roundcubemail-plugin-kolab-folders
>>>>roundcubemail-plugin-kolab-notes roundcubemail-plugin-kolab-tags
>>>>roundcubemail-plugin-libcalendaring roundcubemail-plugin-libkolab
>>>>roundcubemail-plugin-managesieve
>>>>roundcubemail-plugin-newmail-notifier
>>>>roundcubemail-plugin-odfviewer
>>>>roundcubemail-plugin-password roundcubemail-plugin-pdfviewer
>>>>roundcubemail-plugin-redundant-attachments
>>>>roundcubemail-plugin-tasklist roundcubemail-plugin-zipdownload
>>>>roundcubemail-plugins-kolab roundcubemail-skin-chameleon sa-compile
>>>>smarty3 spamassassin spamc wallace zend-framework zend-framework-bin
>>>>Use 'apt autoremove' to remove them.
>>>>The following packages will be REMOVED:
>>>>apparmor kolab kolab-webclient mysql-server mysql-server-5.7
>>>>0 upgraded, 0 newly installed, 5 to remove and 0 not upgraded.
>>>>After this operation, 50.2 MB disk space will be freed.
>>>>Do you want to continue? [Y/n]
>>>>
>>>>Which amounts to basically... everything.
>>>>
>>>>At least apparmor_status lets me know:
>>>>
>>>>apparmor module is loaded.
>>>>0 profiles are loaded.
>>>>0 profiles are in enforce mode.
>>>>0 profiles are in complain mode.
>>>>0 processes have profiles defined.
>>>>0 processes are in enforce mode.
>>>>0 processes are in complain mode.
>>>>0 processes are unconfined but have a profile defined.
>>>>
>>>>So that should be alright I guess.
>>>>
>>>>I have raised the limits and will monitor the outcome. Hopefully
>>>>things
>>>>will quiet down now.
>>>>
>>>>Best,
>>>>Marcel
>>>>
>>>>On 18/01/10, Skale, Franz wrote:
>>>>>Hi Marcel,
>>>>>I would deactivate apparmor.
>>>>>Also i find that your ulimit -a output is wrong.
>>>>>You should raise the open files to 65k depending how much users you
>>>>>have.
>>>>>1024 is too small i guess.
>>>>>Consider this as a starting point:
>>>>>http://directory.fedoraproject.org/docs/389ds/FAQ/performance-tuning.html#linux
>>>>>Since you've a KVM guest, do you use PV or HVM ?
>>>>>Did you install a PTI kernel on the host ?
>>>>>If so, you should use a PTI kernel in the guest too.
>>>>>Jan 7 18:10:46 localhost kernel: [ 0.000000] Kernel/User page
>>>>>tables isolation: enabled e.g (using 4.9.75).
>>>>>Just a thought.
>>>>>
>>>>>
>>>>>Rgds.
>>>>>Franz
>>>>>
>>>>>
>>>>>Am 2018-01-10 16:50, schrieb Marcel Bischoff:
>>>>>>I have been able to pull the kernel messages from the logwatch
>>>>>>output,
>>>>>>didn't think of this before. Maybe it helps in homing in on the
>>>>>>cause. I
>>>>>>couldn't spot something obvious though. Maybe AppArmor does
>>>>>>something
>>>>>>undesirable? I remember running into issues with it years ago in
>>>>>>another
>>>>>>context.
>>>>>>
>>>>>>I will uninstall it tonight, reboot the server and report on my
>>>>>>progress
>>>>>>(or lack thereof).
>>>>>>
>>>>>>Thanks again for bearing with me!
>>>>>>
>>>>>>--------------------- Kernel Begin ------------------------
>>>>>>
>>>>>>
>>>>>>1 Time(s): #2
>>>>>>1 Time(s): #3
>>>>>>1 Time(s): 1 disabled
>>>>>>1 Time(s): 2 disabled
>>>>>>1 Time(s): 3 disabled
>>>>>>1 Time(s): 4 disabled
>>>>>>1 Time(s): 5 disabled
>>>>>>1 Time(s): 6 disabled
>>>>>>1 Time(s): 7 disabled
>>>>>>1 Time(s): ACPI: 1 ACPI AML tables successfully acquired and loaded
>>>>>>1 Time(s): ACPI: Added _OSI(Module Device)
>>>>>>1 Time(s): ACPI: Added _OSI(Processor Aggregator Device)
>>>>>>1 Time(s): ACPI: Added _OSI(Processor Device)
>>>>>>1 Time(s): ACPI: Early table checksum verification disabled
>>>>>>1 Time(s): ACPI: IRQ11 used by override.
>>>>>>1 Time(s): ACPI: IRQ5 used by override.
>>>>>>1 Time(s): ACPI: IRQ9 used by override.
>>>>>>1 Time(s): ACPI: Interpreter enabled
>>>>>>1 Time(s): ACPI: PCI Interrupt Link [LNKD] enabled at IRQ 11
>>>>>>1 Time(s): ACPI: PCI Interrupt Link [LNKS] (IRQs *9)
>>>>>>1 Time(s): ACPI: Power Button [PWRF]
>>>>>>1 Time(s): ACPI: Using IOAPIC for interrupt routing
>>>>>>1 Time(s): ACPI: bus type PCI registered
>>>>>>1 Time(s): ACPI: bus type USB registered
>>>>>>1 Time(s): AES CTR mode by8 optimization enabled
>>>>>>1 Time(s): AMD AuthenticAMD
>>>>>>1 Time(s): AVX version of gcm_enc/dec engaged.
>>>>>>1 Time(s): AppArmor: AppArmor Filesystem Enabled
>>>>>>1 Time(s): AppArmor: AppArmor initialized
>>>>>>1 Time(s): AppArmor: AppArmor sha1 policy hashing enabled
>>>>>>1 Time(s): Booting paravirtualized kernel on KVM
>>>>>>1 Time(s): Btrfs loaded, crc32c=crc32c-intel
>>>>>>1 Time(s): Build-time adjustment of leaf fanout to 64.
>>>>>>1 Time(s): Built 1 zonelists in Node order, mobility grouping on.
>>>>>>Total pages: 4128613
>>>>>>1 Time(s): Calgary: Unable to locate Rio Grande table in EBDA -
>>>>>>bailing!
>>>>>>1 Time(s): Calgary: detecting Calgary via BIOS EBDA area
>>>>>>1 Time(s): Calibrating delay loop (skipped) preset value.. 4199.99
>>>>>>BogoMIPS (lpj=8399992)
>>>>>>1 Time(s): Centaur CentaurHauls
>>>>>>1 Time(s): DMA zone: 21 pages reserved
>>>>>>1 Time(s): DMA zone: 64 pages used for memmap
>>>>>>1 Time(s): DMA32 zone: 12224 pages used for memmap
>>>>>>1 Time(s): Device empty
>>>>>>1 Time(s): EDD information not available.
>>>>>>1 Time(s): EXT4-fs (sda1): mounted filesystem with ordered
>>>>>>data mode.
>>>>>>Opts: (null)
>>>>>>1 Time(s): EXT4-fs (sda1): re-mounted. Opts: discard
>>>>>>1 Time(s): Early memory node ranges
>>>>>>1 Time(s): Freeing SMP alternatives memory: 32K
>>>>>>1 Time(s): Freeing unused kernel memory: 1156K
>>>>>>1 Time(s): Freeing unused kernel memory: 2228K
>>>>>>1 Time(s): Freeing unused kernel memory: 268K
>>>>>>1 Time(s): GHES: HEST is not enabled!
>>>>>>1 Time(s): Hierarchical RCU implementation.
>>>>>>1 Time(s): Hypervisor detected: KVM
>>>>>>1 Time(s): Initialise system trusted keyrings
>>>>>>1 Time(s): Intel GenuineIntel
>>>>>>1 Time(s): KERNEL supported cpus:
>>>>>>1 Time(s): KVM setup async PF for cpu 1
>>>>>>1 Time(s): KVM setup async PF for cpu 2
>>>>>>1 Time(s): KVM setup async PF for cpu 3
>>>>>>1 Time(s): Key type asymmetric registered
>>>>>>1 Time(s): Key type big_key registered
>>>>>>1 Time(s): Key type dns_resolver registered
>>>>>>1 Time(s): Key type encrypted registered
>>>>>>1 Time(s): Key type trusted registered
>>>>>>1 Time(s): MTRR default type: write-back
>>>>>>1 Time(s): MTRR fixed ranges enabled:
>>>>>>1 Time(s): MTRR variable ranges enabled:
>>>>>>1 Time(s): Magic number: 2:724:141
>>>>>>1 Time(s): Mount-cache hash table entries: 32768 (order: 6, 262144
>>>>>>bytes)
>>>>>>1 Time(s): Mountpoint-cache hash table entries: 32768 (order: 6,
>>>>>>262144 bytes)
>>>>>>1 Time(s): Movable zone start for each node
>>>>>>1 Time(s): NET: Registered protocol family 1
>>>>>>1 Time(s): NET: Registered protocol family 16
>>>>>>1 Time(s): NET: Registered protocol family 17
>>>>>>1 Time(s): NET: Registered protocol family 2
>>>>>>1 Time(s): NR_IRQS:524544 nr_irqs:456 16
>>>>>>1 Time(s): NX (Execute Disable) protection: active
>>>>>>1 Time(s): NetLabel: domain hash size = 128
>>>>>>1 Time(s): NetLabel: protocols = UNLABELED CIPSOv4 CALIPSO
>>>>>>1 Time(s): NetLabel: unlabeled traffic allowed by default
>>>>>>1 Time(s): NetLabel: Initializing
>>>>>>1 Time(s): No NUMA configuration found
>>>>>>1 Time(s): Normal zone: 53248 pages used for memmap
>>>>>>1 Time(s): PCCT header not found.
>>>>>>1 Time(s): PCI-DMA: Using software bounce buffering for IO
>>>>>>(SWIOTLB)
>>>>>>1 Time(s): PCI: Using ACPI for IRQ routing
>>>>>>1 Time(s): PCI: Using configuration type 1 for base access
>>>>>>1 Time(s): PCI: Using host bridge windows from ACPI; if
>>>>>>necessary, use
>>>>>>"pci=nocrs" and report a bug
>>>>>>1 Time(s): PCI: pci_cache_line_size set to 64 bytes
>>>>>>1 Time(s): PM: Hibernation image not present or could not be
>>>>>>loaded.
>>>>>>1 Time(s): PPP generic driver version 2.4.2
>>>>>>1 Time(s): Performance Events: unsupported p6 CPU model 42 no PMU
>>>>>>driver, software events only.
>>>>>>1 Time(s): Policy zone: Normal
>>>>>>2 Time(s): Process accounting resumed
>>>>>>1 Time(s): RCU restricting CPUs from NR_CPUS=8192 to nr_cpu_ids=4.
>>>>>>1 Time(s): RCU: Adjusting geometry for rcu_fanout_leaf=64,
>>>>>>nr_cpu_ids=4
>>>>>>1 Time(s): SCSI subsystem initialized
>>>>>>1 Time(s): SMBIOS 2.8 present.
>>>>>>1 Time(s): Scanning 1 areas for low memory corruption
>>>>>>1 Time(s): Security Framework initialized
>>>>>>1 Time(s): Segment Routing with IPv6
>>>>>>1 Time(s): Switched APIC routing to physical x2apic.
>>>>>>1 Time(s): TSC deadline timer enabled
>>>>>>1 Time(s): UDP hash table entries: 8192 (order: 6, 262144 bytes)
>>>>>>1 Time(s): UDP-Lite hash table entries: 8192 (order: 6,
>>>>>>262144 bytes)
>>>>>>1 Time(s): Unpacking initramfs...
>>>>>>1 Time(s): Using ACPI (MADT) for SMP configuration information
>>>>>>1 Time(s): Write protecting the kernel read-only data: 14336k
>>>>>>1 Time(s): Yama: becoming mindful.
>>>>>>1 Time(s): Zone ranges:
>>>>>>1 Time(s): acpi device:12: hash matches
>>>>>>1 Time(s): acpiphp: Slot [11] registered
>>>>>>1 Time(s): acpiphp: Slot [12] registered
>>>>>>1 Time(s): acpiphp: Slot [13] registered
>>>>>>1 Time(s): acpiphp: Slot [14] registered
>>>>>>1 Time(s): acpiphp: Slot [15] registered
>>>>>>1 Time(s): acpiphp: Slot [16] registered
>>>>>>1 Time(s): acpiphp: Slot [17] registered
>>>>>>1 Time(s): acpiphp: Slot [18] registered
>>>>>>1 Time(s): acpiphp: Slot [19] registered
>>>>>>1 Time(s): acpiphp: Slot [21] registered
>>>>>>1 Time(s): acpiphp: Slot [22] registered
>>>>>>1 Time(s): acpiphp: Slot [23] registered
>>>>>>1 Time(s): acpiphp: Slot [24] registered
>>>>>>1 Time(s): acpiphp: Slot [25] registered
>>>>>>1 Time(s): acpiphp: Slot [26] registered
>>>>>>1 Time(s): acpiphp: Slot [27] registered
>>>>>>1 Time(s): acpiphp: Slot [28] registered
>>>>>>1 Time(s): acpiphp: Slot [29] registered
>>>>>>1 Time(s): acpiphp: Slot [31] registered
>>>>>>1 Time(s): acpiphp: Slot [3] registered
>>>>>>1 Time(s): acpiphp: Slot [4] registered
>>>>>>1 Time(s): acpiphp: Slot [5] registered
>>>>>>1 Time(s): acpiphp: Slot [6] registered
>>>>>>1 Time(s): acpiphp: Slot [7] registered
>>>>>>1 Time(s): acpiphp: Slot [8] registered
>>>>>>1 Time(s): acpiphp: Slot [9] registered
>>>>>>1 Time(s): async_tx: api initialized (async)
>>>>>>1 Time(s): audit: initializing netlink subsys (disabled)
>>>>>>1 Time(s): clocksource: Switched to clocksource kvm-clock
>>>>>>1 Time(s): cpuidle: using governor ladder
>>>>>>1 Time(s): cpuidle: using governor menu
>>>>>>1 Time(s): devtmpfs: initialized
>>>>>>1 Time(s): ehci-pci: EHCI PCI platform driver
>>>>>>1 Time(s): ehci-platform: EHCI generic platform driver
>>>>>>1 Time(s): evm: security.SMACK64
>>>>>>1 Time(s): evm: security.SMACK64EXEC
>>>>>>1 Time(s): evm: security.SMACK64MMAP
>>>>>>1 Time(s): evm: security.SMACK64TRANSMUTE
>>>>>>1 Time(s): evm: security.capability
>>>>>>1 Time(s): evm: security.ima
>>>>>>1 Time(s): evm: security.selinux
>>>>>>1 Time(s): ftrace: allocating 34227 entries in 134 pages
>>>>>>1 Time(s): fuse init (API version 7.26)
>>>>>>1 Time(s): hidraw: raw HID events driver (C) Jiri Kosina
>>>>>>1 Time(s): hpet clockevent registered
>>>>>>1 Time(s): i2c /dev entries driver
>>>>>>1 Time(s): ima: No TPM chip found, activating TPM-bypass! (rc=-19)
>>>>>>1 Time(s): intel_idle: does not run on family 6 model 42
>>>>>>1 Time(s): io scheduler cfq registered
>>>>>>1 Time(s): io scheduler deadline registered
>>>>>>1 Time(s): io scheduler noop registered (default)
>>>>>>1 Time(s): ledtrig-cpu: registered to indicate activity on CPUs
>>>>>>1 Time(s): libphy: Fixed MDIO Bus: probed
>>>>>>1 Time(s): loop: module loaded
>>>>>>1 Time(s): mousedev: PS/2 mouse device common for all mice
>>>>>>1 Time(s): ohci-pci: OHCI PCI platform driver
>>>>>>1 Time(s): ohci-platform: OHCI generic platform driver
>>>>>>1 Time(s): ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver
>>>>>>1 Time(s): pinctrl core: initialized pinctrl subsystem
>>>>>>1 Time(s): pnp: PnP ACPI init
>>>>>>1 Time(s): pnp: PnP ACPI: found 5 devices
>>>>>>1 Time(s): ppdev: user-space parallel port driver
>>>>>>1 Time(s): raid6: .... xor() 6424 MB/s, rmw enabled
>>>>>>1 Time(s): raid6: sse2x1 gen() 6723 MB/s
>>>>>>1 Time(s): raid6: sse2x1 xor() 5185 MB/s
>>>>>>1 Time(s): raid6: sse2x2 gen() 8399 MB/s
>>>>>>1 Time(s): raid6: sse2x2 xor() 5585 MB/s
>>>>>>1 Time(s): raid6: sse2x4 gen() 9942 MB/s
>>>>>>1 Time(s): raid6: sse2x4 xor() 6424 MB/s
>>>>>>1 Time(s): raid6: using algorithm sse2x4 gen() 9942 MB/s
>>>>>>1 Time(s): raid6: using ssse3x2 recovery algorithm
>>>>>>1 Time(s): random: crng init done
>>>>>>1 Time(s): random: fast init done
>>>>>>8 Time(s): random: systemd-udevd: uninitialized urandom read (16
>>>>>>bytes read)
>>>>>>2 Time(s): random: udevadm: uninitialized urandom read (16 bytes
>>>>>>read)
>>>>>>1 Time(s): registered taskstats version 1
>>>>>>1 Time(s): scsi host1: ata_piix
>>>>>>1 Time(s): scsi host2: Virtio SCSI HBA
>>>>>>1 Time(s): sda: sda1
>>>>>>1 Time(s): setup_percpu: NR_CPUS:8192 nr_cpumask_bits:4
>>>>>>nr_cpu_ids:4
>>>>>>nr_node_ids:1
>>>>>>1 Time(s): smp: Bringing up secondary CPUs ...
>>>>>>1 Time(s): smp: Brought up 1 node, 4 CPUs
>>>>>>1 Time(s): smpboot: Max logical packages: 1
>>>>>>1 Time(s): smpboot: Total of 4 processors activated (16799.98
>>>>>>BogoMIPS)
>>>>>>1 Time(s): tun: Universal TUN/TAP device driver, 1.6
>>>>>>1 Time(s): uhci_hcd: USB Universal Host Controller Interface driver
>>>>>>1 Time(s): usb 1-1: Manufacturer: QEMU
>>>>>>1 Time(s): usb 1-1: New USB device strings: Mfr=1, Product=3,
>>>>>>SerialNumber=5
>>>>>>1 Time(s): usb 1-1: Product: QEMU USB Tablet
>>>>>>1 Time(s): usb 1-1: SerialNumber: 42
>>>>>>1 Time(s): usb 1-1: new full-speed USB device number 2 using
>>>>>>uhci_hcd
>>>>>>1 Time(s): usb usb1: New USB device strings: Mfr=3, Product=2,
>>>>>>SerialNumber=1
>>>>>>1 Time(s): usb usb1: Product: UHCI Host Controller
>>>>>>1 Time(s): usbcore: registered new device driver usb
>>>>>>1 Time(s): usbcore: registered new interface driver hub
>>>>>>1 Time(s): usbcore: registered new interface driver usbfs
>>>>>>1 Time(s): usbcore: registered new interface driver usbhid
>>>>>>1 Time(s): usbhid: USB HID core driver
>>>>>>1 Time(s): vgaarb: loaded
>>>>>>1 Time(s): x2apic enabled
>>>>>>1 Time(s): x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256
>>>>>>1 Time(s): x86/mm: Checked W+X mappings: passed, no W+X
>>>>>>pages found.
>>>>>>1 Time(s): x86/mm: Memory block size: 128MB
>>>>>>1 Time(s): x86: Booting SMP configuration:
>>>>>>1 Time(s): xor: automatically using best checksumming
>>>>>>function avx
>>>>>>1 Time(s): zbud: loaded
>>>>>>1 Time(s): zswap: loaded using pool lzo/zbud
>>>>>>
>>>>>>---------------------- Kernel End -------------------------
>>>>>>
>>>>>>On 18/01/10, Marcel Bischoff wrote:
>>>>>>>On 18/01/10, Skale, Franz wrote:
>>>>>>>>06:21 is the lograotation, so no problem. Same by me.
>>>>>>>
>>>>>>>A bit reassuring but still: shouldn't the service cleanly restart
>>>>>>>instead of barfing "Disorderly Shutdown"?
>>>>>>>
>>>>>>>>What strucks me is, that it seems that ns-slapd as to reallocate
>>>>>>>>memory.
>>>>>>>>How much memory does your server have ?
>>>>>>>>send free -m
>>>>>>>
>>>>>>>$ free -m
>>>>>>> total used free shared buff/cache
>>>>>>>available
>>>>>>>Mem: 16045 1304 13096 56
>>>>>>>1644 14371
>>>>>>>Swap: 0 0 0
>>>>>>>
>>>>>>>No problem I can see there.
>>>>>>>
>>>>>>>>Do you have selinux enabled !
>>>>>>>>If so, disable it by adding selinux=0 to /etc/default/grub
>>>>>>>>and rerun
>>>>>>>>update-grub.
>>>>>>>
>>>>>>>No, not enabled.
>>>>>>>
>>>>>>>>Send the kernel version: uname -a
>>>>>>>
>>>>>>>Linux mx.example.com 4.10.0-42-generic #46~16.04.1-Ubuntu SMP Mon
>>>>>>>Dec 4
>>>>>>>15:57:59 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux
>>>>>>>
>>>>>>>>How much open file handles to your system allow per process ?
>>>>>>>>send: ulimit -a
>>>>>>>
>>>>>>>$ ulimit -a
>>>>>>>Maximum size of core files created (kB,
>>>>>>>-c) 0
>>>>>>>Maximum size of a process’s data segment (kB,
>>>>>>>-d) unlimited
>>>>>>>Maximum size of files created by the shell (kB,
>>>>>>>-f) unlimited
>>>>>>>Maximum size that may be locked into memory (kB,
>>>>>>>-l) 64
>>>>>>>Maximum resident set size (kB,
>>>>>>>-m) unlimited
>>>>>>>Maximum number of open file descriptors
>>>>>>>(-n) 1024
>>>>>>>Maximum stack size (kB,
>>>>>>>-s) 8192
>>>>>>>Maximum amount of cpu time in seconds (seconds,
>>>>>>>-t) unlimited
>>>>>>>Maximum number of processes available to a single user
>>>>>>>(-u) 64015
>>>>>>>Maximum amount of virtual memory available to the shell (kB,
>>>>>>>-v) unlimited
>>>>>>>
>>>>>>>>send dmesg: (is there a segfault).
>>>>>>>
>>>>>>>The whole dmesg output is spammed by ufw and contains no useful
>>>>>>>information whatsoever.
>>>>>>>
>>>>>>>>It really could be, that you have a failing memory module:
>>>>>>>>send dmidecode
>>>>>>>
>>>>>>>I don't think this is likely as this is a virtual server.
>>>>>>>
>>>>>>>$ dmidecode
>>>>>>># dmidecode 3.0
>>>>>>>Getting SMBIOS data from sysfs.
>>>>>>>SMBIOS 2.8 present.
>>>>>>>10 structures occupying 408 bytes.
>>>>>>>Table at 0x000F68A0.
>>>>>>>
>>>>>>>Handle 0x0000, DMI type 0, 24 bytes
>>>>>>>BIOS Information
>>>>>>> Vendor: SeaBIOS
>>>>>>> Version: 1.10.2
>>>>>>> Release Date: 04/01/2014
>>>>>>> Address: 0xE8000
>>>>>>> Runtime Size: 96 kB
>>>>>>> ROM Size: 64 kB
>>>>>>> Characteristics:
>>>>>>> BIOS characteristics not supported
>>>>>>> Targeted content distribution is supported
>>>>>>> BIOS Revision: 0.0
>>>>>>>
>>>>>>>Handle 0x0100, DMI type 1, 27 bytes
>>>>>>>System Information
>>>>>>> Manufacturer: Hetzner
>>>>>>> Product Name: vServer
>>>>>>> Version: 2
>>>>>>> Serial Number: Not Specified
>>>>>>> UUID: A8236400-D36B-0135-FE8F-10BF48D7F2C6
>>>>>>> Wake-up Type: Power Switch
>>>>>>> SKU Number: a8236400-d36b-0135-fe8f-10bf48d7f2c6
>>>>>>> Family: Not Specified
>>>>>>>
>>>>>>>Handle 0x0300, DMI type 3, 21 bytes
>>>>>>>Chassis Information
>>>>>>> Manufacturer: QEMU
>>>>>>> Type: Other
>>>>>>> Lock: Not Present
>>>>>>> Version: pc-i440fx-2.10
>>>>>>> Serial Number: Not Specified
>>>>>>> Asset Tag: Not Specified
>>>>>>> Boot-up State: Safe
>>>>>>> Power Supply State: Safe
>>>>>>> Thermal State: Safe
>>>>>>> Security Status: Unknown
>>>>>>> OEM Information: 0x00000000
>>>>>>> Height: Unspecified
>>>>>>> Number Of Power Cords: Unspecified
>>>>>>> Contained Elements: 0
>>>>>>>
>>>>>>>Handle 0x0400, DMI type 4, 42 bytes
>>>>>>>Processor Information
>>>>>>> Socket Designation: CPU 0
>>>>>>> Type: Central Processor
>>>>>>> Family: Other
>>>>>>> Manufacturer: QEMU
>>>>>>> ID: A1 06 02 00 FF FB 8B 07
>>>>>>> Version: pc-i440fx-2.10
>>>>>>> Voltage: Unknown
>>>>>>> External Clock: Unknown
>>>>>>> Max Speed: 2000 MHz
>>>>>>> Current Speed: 2000 MHz
>>>>>>> Status: Populated, Enabled
>>>>>>> Upgrade: Other
>>>>>>> L1 Cache Handle: Not Provided
>>>>>>> L2 Cache Handle: Not Provided
>>>>>>> L3 Cache Handle: Not Provided
>>>>>>> Serial Number: Not Specified
>>>>>>> Asset Tag: Not Specified
>>>>>>> Part Number: Not Specified
>>>>>>> Core Count: 4
>>>>>>> Core Enabled: 4
>>>>>>> Thread Count: 1
>>>>>>> Characteristics: None
>>>>>>>
>>>>>>>Handle 0x1000, DMI type 16, 23 bytes
>>>>>>>Physical Memory Array
>>>>>>> Location: Other
>>>>>>> Use: System Memory
>>>>>>> Error Correction Type: Multi-bit ECC
>>>>>>> Maximum Capacity: 16 GB
>>>>>>> Error Information Handle: Not Provided
>>>>>>> Number Of Devices: 1
>>>>>>>
>>>>>>>Handle 0x1100, DMI type 17, 40 bytes
>>>>>>>Memory Device
>>>>>>> Array Handle: 0x1000
>>>>>>> Error Information Handle: Not Provided
>>>>>>> Total Width: Unknown
>>>>>>> Data Width: Unknown
>>>>>>> Size: 16384 MB
>>>>>>> Form Factor: DIMM
>>>>>>> Set: None
>>>>>>> Locator: DIMM 0
>>>>>>> Bank Locator: Not Specified
>>>>>>> Type: RAM
>>>>>>> Type Detail: Other
>>>>>>> Speed: Unknown
>>>>>>> Manufacturer: QEMU
>>>>>>> Serial Number: Not Specified
>>>>>>> Asset Tag: Not Specified
>>>>>>> Part Number: Not Specified
>>>>>>> Rank: Unknown
>>>>>>> Configured Clock Speed: Unknown
>>>>>>> Minimum Voltage: Unknown
>>>>>>> Maximum Voltage: Unknown
>>>>>>> Configured Voltage: Unknown
>>>>>>>
>>>>>>>Handle 0x1300, DMI type 19, 31 bytes
>>>>>>>Memory Array Mapped Address
>>>>>>> Starting Address: 0x00000000000
>>>>>>> Ending Address: 0x000BFFFFFFF
>>>>>>> Range Size: 3 GB
>>>>>>> Physical Array Handle: 0x1000
>>>>>>> Partition Width: 1
>>>>>>>
>>>>>>>Handle 0x1301, DMI type 19, 31 bytes
>>>>>>>Memory Array Mapped Address
>>>>>>> Starting Address: 0x00100000000
>>>>>>> Ending Address: 0x0043FFFFFFF
>>>>>>> Range Size: 13 GB
>>>>>>> Physical Array Handle: 0x1000
>>>>>>> Partition Width: 1
>>>>>>>
>>>>>>>Handle 0x2000, DMI type 32, 11 bytes
>>>>>>>System Boot Information
>>>>>>> Status: No errors detected
>>>>>>>
>>>>>>>Handle 0x7F00, DMI type 127, 4 bytes
>>>>>>>End Of Table
>>>>>>>
>>>>>>>>Did you update your kernel days ago, if so, you sure ran
>>>>>>>>into a buggy
>>>>>>>>kernel 4.9.65.
>>>>>>>>I built a 4.9.75 PTI enabled kernel which i send you to test.
>>>>>>>
>>>>>>>4.10.0-42-generic
>>>>>>>
>>>>>>>>Office 365 would be a bad and expensive choice.
>>>>>>>
>>>>>>>I agree. I'd very much like to avoid it but when Kolab turn out to
>>>>>>>have
>>>>>>>issues with the current setup, I doubt I'll get another shot.
>>>>>>>
>>>>>>>Best,
>>>>>>>Marcel
More information about the users
mailing list