[Freeipa-users] RHEL 7.2 update - ns-slapd replication keep alive entry

[Orion Poplawski]

On 12/02/2015 01:42 PM, Andy Thompson wrote:
> Since updating to RHEL 7.2 I've got issues with ns-slapd hanging the system up after a period of time.  The directory becomes unresponsive to searches or any connections.  After a restart I see
> 
> [02/Dec/2015:15:27:41 -0500] - slapd started.  Listening on All Interfaces port 389 for LDAP requests
> [02/Dec/2015:15:27:41 -0500] - Listening on All Interfaces port 636 for LDAPS requests
> [02/Dec/2015:15:27:41 -0500] - Listening on /var/run/slapd-MHBENP-LIN.socket for LDAPI requests
> [02/Dec/2015:15:27:44 -0500] NSMMReplicationPlugin - agmt="cn=meTomdhixnpipa02.mhbenp.lin" (mdhixnpipa02:389): Replication bind with GSSAPI auth resumed
> [02/Dec/2015:15:27:47 -0500] NSMMReplicationPlugin - replication keep alive entry <cn=repl keep alive 4,dc=mhbenp,dc=lin> already exists
> 
> In the logs and occasionally the keepalive entry message is seen a few times and then eventually the ns-slapd taps the system.  100% util, system load crawls up between 30 and 40 and eventually I have to restart the service to get it to respond again.  Memory usage is normal, db and entry cache is sufficient.. possibly a little on the high side but resource is sitting there asking to be used :)
> 
> Running 389-ds-base-1.3.4.0-19.el7.x86_64 after the update yesterday.

I've not (yet) noticed any hangs in ns-slapd, although our system is not yet
really in production.  However I am seeing many of these "replication keep
alive entry" messages as well with the new version.  Can anyone speak to what
is causing these?


-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion at nwra.com
Boulder, CO 80301                   http://www.nwra.com