Author Topic: Slapd errors? in syslog  (Read 7266 times)

auerhaan

  • Zen Monk
  • **
  • Posts: 54
  • Karma: +2/-0
    • View Profile
    • Auerhaan
Slapd errors? in syslog
« on: February 15, 2010, 09:57:25 pm »
I have this error in my syslog from time to time:
Quote
Feb 15 21:38:08 ubuntu01 slapd[7927]: conn=57599 op=17 do_search: invalid dn: "sambaDomainName=,sambaDomainName=AUERHAAN-WG,dc=ebox"

Looks like there is a request that isn't build up properly sambaDomainName=,sambaDomainName=

There are also a lot messages like these:
Quote
Feb 15 08:03:45 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (domainMailPortion) not indexed
Feb 15 08:03:46 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (mail) not indexed
Feb 15 08:03:46 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (dc) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (sambaSID) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (sambaGroupType) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (sambaGroupType) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (sambaSIDList) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (sambaSID) not indexed
Feb 15 08:04:30 ubuntu01 slapd[7927]: <= bdb_equality_candidates: (gidNumber) not indexed
Zentyal 2.2.11 on:
Dell Poweredge 2900
2x Quad-Core Xeon E5310 1.6Ghz
16 GB (8x 2 GB)
3x 73 GB SAS (PERC 5/i RAID5)
3x 146 GB SAS (PERC 5/i RAID5)
Broadcom dual gigabit NIC

At the moment migrating to Zentyal 3.3

Ret

  • Zen Apprentice
  • *
  • Posts: 27
  • Karma: +0/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #1 on: March 08, 2010, 10:01:52 pm »
I'm also getting SLAPD messages en syslog, such as:

slapd[8570]: <= bdb_equality_candidates: (mail) not indexed

slapd[8570]: connection_read(22): no connection!


Any help??

MMaI

  • Zen Apprentice
  • *
  • Posts: 11
  • Karma: +0/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #2 on: April 16, 2010, 05:45:51 pm »
same problem here, have been looking for problems and errors but got no result.
As I have EBox on one of my production system, please resolve this quickly!

jsalamero

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1419
  • Karma: +45/-1
    • View Profile
Re: Slapd errors? in syslog
« Reply #3 on: April 23, 2010, 08:08:51 pm »
This is a harmless error, you can just ignore it.

christian

  • Guest
Re: Slapd errors? in syslog
« Reply #4 on: April 24, 2010, 07:04:30 am »
This is a harmless error, you can just ignore it.

Harmless unless you have thousands of entries isn't it?
I mean lack of index will impact performance (both in term of response time and load on server).
For what I've experienced with other LDAP distributions, up to few hundreds of entries will not make significant difference whenever attribute is indexed or not. This assuming you don't have too many requests... but this should match the fact that you don't have too many user entries neither.

Am I correct?

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #5 on: April 27, 2010, 05:11:11 pm »
To remove the 'bdb_equality' warnings you could follow this instructions:

http://trac.ebox-platform.com/wiki/Document/HowTo/LDAPoptimization

Javier Amor Garcia

  • Zentyal Staff
  • Zen Hero
  • *****
  • Posts: 1225
  • Karma: +12/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #6 on: April 27, 2010, 05:12:11 pm »
Have you any clue of when this errors appear? Is something random or is always after a specific operation?.

I have this error in my syslog from time to time:
Quote
Feb 15 21:38:08 ubuntu01 slapd[7927]: conn=57599 op=17 do_search: invalid dn: "sambaDomainName=,sambaDomainName=AUERHAAN-WG,dc=ebox"

Looks like there is a request that isn't build up properly sambaDomainName=,sambaDomainName=
« Last Edit: April 27, 2010, 05:36:36 pm by Javier Amor Garcia »

lelik

  • Zen Monk
  • **
  • Posts: 64
  • Karma: +0/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #7 on: July 30, 2010, 02:00:07 am »
According to http://trac.ebox-platform.com/wiki/Document/HowTo/LDAPoptimization you have to modify
Code: [Select]
$ sudo vim /etc/ldap/slapd-frontend.d/cn\=config/olcDatabase\=\{1\}hdb.ldif
$ sudo vim /etc/ldap/slapd-translucent.d/cn\=config/olcDatabase\=\{1\}hdb.ldif
$ sudo vim /etc/ldap/slapd-replica.d/cn\=config/olcDatabase\=\{1\}hdb.ldif
which no longer the case as slapd schema has changed.
« Last Edit: July 30, 2010, 06:42:58 pm by lelik »

lelik

  • Zen Monk
  • **
  • Posts: 64
  • Karma: +0/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #8 on: July 30, 2010, 06:44:04 pm »
Below worked for me:
Stop slapd:
Code: [Select]
$ sudo /etc/init.d/slapd stopModify config to include additional indexes
Code: [Select]
$ sudo nano /etc/ldap/slapd.d/cn\=config/olcDatabase\=\{1\}hdb.ldifFind
Code: [Select]
olcDbIndex: objectclass eq
olcDbIndex: entryCSN eq
olcDbIndex: entryUUID eq
olcDbIndex: uid eq
olcDbIndex: memberUid eq
Replace with
Code: [Select]
olcDbIndex: objectClass eq,pres
olcDbIndex: ou,cn,sn,mail,givenname eq,pres,sub
olcDbIndex: uidNumber,gidNumber,memberUid eq,pres
olcDbIndex: loginShell eq,pres
olcDbIndex: uniqueMember eq,pres
olcDbIndex: uid pres,sub,eq
olcDbIndex: displayName pres,sub,eq
olcDbIndex: sambaSID eq
olcDbIndex: sambaPrimaryGroupSID eq
olcDbIndex: sambaDomainName eq
olcDbIndex: sambaGroupType eq
olcDbIndex: sambaSIDList eq
Save.
Index:
Code: [Select]
$ sudo slapindex
WARNING!
Runnig as root!
There's a fair chance slapd will fail to start.
Check file permissions!
Fix permissions
Code: [Select]
$ sudo chown openldap:openldap -R /var/lib/ldap*Restart slapd
Code: [Select]
$ sudo /etc/init.d/slapd start

satyris

  • Zen Monk
  • **
  • Posts: 94
  • Karma: +0/-0
    • View Profile
Re: Slapd errors? in syslog
« Reply #9 on: August 07, 2010, 10:19:41 am »
@lelik:
Thanks man, that saved my day  8)

Update:
Quote
slapd[8122]: connection_read(23): no connection!

still there :-(
« Last Edit: August 07, 2010, 10:28:39 am by satyris »