<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: arial,helvetica,sans-serif; font-size: 10pt; color: #000000'>The only solutions for me was to integrate the CR repository and upgrade to IPA 4.1.0. Perhaps my problem was solved by<br><br>'CVE-2015-1827' It was discovered that the IPA extdom Directory Server <br>plug-in did not correctly perform memory reallocation when handling user <br>account information. A request for a list of groups for a user that <br>belongs to a large number of groups would cause a Directory Server to <br>crash.<br><br>Anyway, after 5 days without any crash I'm very confident the the problem is solved.<br><br><hr id="zwchr"><div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From: </b>"Sankar Ramlingam" <sramling@redhat.com><br><b>To: </b>freeipa-users@redhat.com<br><b>Sent: </b>Friday, 27 March, 2015 4:32:53 PM<br><b>Subject: </b>Re: [Freeipa-users] Fwd: Unexpected IPA Crashes<br><br>
<div class="moz-cite-prefix">On 03/27/2015 01:42 PM, David Kreuter
wrote:<br>
</div>
<blockquote cite="mid:833d0e26-2a27-4b71-8dc5-c4cd0eb51f92@zimbra.bytesource.net">
<style>p { margin: 0; }</style>
<div style="font-family: arial,helvetica,sans-serif; font-size:
10pt; color: #000000">No, there are no entries with "segfaulter"
neither in /var/log/messags nor in journalctr.
<div><br>
</div>
<div>Meanwhile we encountered several directory server hangs and
I was able to produce the stacktrace. Perhpas you can have a
look.<br>
</div>
</div>
</blockquote>
Hi David,<br>
You seem to have the latest/released version of 389-ds-base. You
can probably try an upgrade to get the latest of other dependent
components and 389-ds-base-debuginfo.<br>
<br>
Thanks,<br>
-Sankar R.<br>
<br>
<blockquote cite="mid:833d0e26-2a27-4b71-8dc5-c4cd0eb51f92@zimbra.bytesource.net">
<div style="font-family: arial,helvetica,sans-serif; font-size:
10pt; color: #000000">
<div>
<div><br>
<hr id="zwchr">
<div style="color:#000;font-weight:normal;font-style:normal;text-decoration:none;font-family:Helvetica,Arial,sans-serif;font-size:12pt;"><b>From:
</b>"David Kreuter" <a class="moz-txt-link-rfc2396E" href="mailto:david.kreuter@bytesource.net" target="_blank"><david.kreuter@bytesource.net></a><br>
<b>To: </b>"freeipa-users"
<a class="moz-txt-link-rfc2396E" href="mailto:freeipa-users@redhat.com" target="_blank"><freeipa-users@redhat.com></a><br>
<b>Sent: </b>Thursday, 26 March, 2015 11:18:59 PM<br>
<b>Subject: </b>Unexpected IPA Crashes<br>
<br>
<style>p { margin: 0; }</style>
<div style="font-family: arial,helvetica,sans-serif;
font-size: 10pt; color: #000000">We have been using
FreeIPA since two years and were more than happy. But
since two weeks we are facing unexpected crashed and can
not really debug the strange behaviours. The crashes are
definitely not caused by connecting a new<span style="font-size: 10pt;"> system or changing the LDAP
schema heavily. Following IPA is used:</span>
<div>
<div><br>
</div>
<div>
<p class="p1"><span class="s1">Name : </span><span class="s2">ipa-server</span></p>
<p class="p1"><span class="s1">Arch : x86_64</span></p>
<p class="p1"><span class="s1">Version : 3.3.3</span></p>
<p class="p1"><span class="s1">Release :
28.0.1.el7.centos.3</span></p>
<p class="p1"><span class="s1">Size : 4.1 M</span></p>
<p class="p1"><span class="s1"><br>
</span></p>
<p class="p1"><span class="s1">I have followed the
troubleshooting
guide <a class="moz-txt-link-freetext" href="http://directory.fedoraproject.org/docs/389ds/FAQ/faq.html#Troubleshooting" target="_blank">http://directory.fedoraproject.org/docs/389ds/FAQ/faq.html#Troubleshooting</a>
and activated logging and activated the core
dumping. Unfortunately, I cannot provide you any
core dump, because it is not created after the
ipa servers crashes. I'm sure the dirsrv is
causing the problem, because when i restart the
389, then ipa works fine for a while. Currently
I have activated the replication log level 8192.
The error log shows no suspicious error or any
fatal error. Following 389* versions are used:</span></p>
<p class="p1"><span class="s1"><br>
</span></p>
<p class="p1"><span class="s1">Installed Packages</span></p>
<p class="p1"><span class="s1">389-ds-base.x86_64
1.3.3.1-15.el7_1
@/389-ds-base-1.3.3.1-15.el7_1.x86_64 </span></p>
<p class="p1"><span class="s1">389-ds-base-debuginfo.x86_64
1.3.1.6-26.el7_0
@base-debuginfo </span></p>
<p class="p1"><span class="s1">
</span></p>
<p class="p1"><span class="s1">389-ds-base-libs.x86_64
1.3.3.1-15.el7_1</span></p>
<p class="p1"><span class="s1"><br>
</span></p>
<p class="p1"><span class="s1">Can you please
provide some hint how I can debug this problem
in more detail. Btw, the ipa infrastructure
consist of one master and one replica. The
server was also crashing, when the replica
server was turned off. Do you thing an upgrade
would solve the problem as the last resort?</span></p>
<p class="p1"><span class="s1"><br>
</span></p>
</div>
</div>
</div>
</div>
<br>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
<br>-- <br>Manage your subscription for the Freeipa-users mailing list:<br>https://www.redhat.com/mailman/listinfo/freeipa-users<br>Go to http://freeipa.org for more info on the project</div><br></div></body></html>