389 dirsrv ns-slapd infinite hang bug, triggered by wallaced - had to disable it

[Jason Spangler]

Hi all,

Just fyi to folks - there appears to be a hang bug in 389 dirsrv (aka
ns-slapd) which, in my install at least, was being tickled by a large
batch of messages being processed by wallaced. This led to no email
being received, processed, or sent by my Kolab installation (even after
multiple restarts).

Bug entries:
https://bugzilla.redhat.com/show_bug.cgi?id=1370121
https://bugzilla.redhat.com/show_bug.cgi?id=1329061

It appears the fix is only available to RedHat customers currently:
https://rhn.redhat.com/errata/RHSA-2016-2594.html

I'm running 389-ds-base-1.3.4.0-33.el7_2.x86_64 (the EL7 rpm).

In my instance, the call stack in dirsrv matched the one from the hang
bug entry.

To get around the dirsrv hang, I had to disable wallaced processing in
/etc/postfix/master.cf for now (until the dirsrv fix is released).

Hope this helps someone else and saves them some time.
- Jason

[Martin Friberg]

warning: dict_ldap_connect: Unable to bind to server
ldap://localhost:389 with dn uid=kolab-service,ou=Special
Users,dc=XXXyr,dc=se: -5 (Timed out)

any input is welcome

I tested disable wallace = mails starts to come in but does not get
delivierd outgoing is a no no

comment out wallace in master.cf like this

# Filter email through Amavisd
smtp-amavis unix - - n - 3 smtp
-o smtp_data_done_timeout=1800
-o disable_dns_lookups=yes
-o smtp_send_xforward_command=yes
-o max_use=20
-o smtp_bind_address=127.0.0.1

# Listener to re-inject email from Amavisd into Postfix
127.0.0.1:10025 inet n - n - 100 smtpd
-o cleanup_service_name=cleanup_internal
#-o content_filter=smtp-wallace:[127.0.0.1]:10026
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o smtpd_authorized_xforward_hosts=127.0.0.0/8

# Filter email through Wallace
#smtp-wallace unix - - n - 3 smtp
# -o smtp_data_done_timeout=1800
# -o disable_dns_lookups=yes
# -o smtp_send_xforward_command=yes
# -o max_use=20

# Listener to re-inject email from Wallace into Postfix
#127.0.0.1:10027 inet n - n - 100 smtpd
# -o cleanup_service_name=cleanup_internal
# -o content_filter=
# -o local_recipient_maps=
#-o relay_recipient_maps=
# -o smtpd_restriction_classes=
# -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_recipient_restrictions=permit_mynetworks,reject
# -o mynetworks=127.0.0.0/8
# -o smtpd_authorized_xforward_hosts=127.0.0.0/8


mail still does not get delivered or sent


any input ?


---
Detta e-postmeddelande har sökts igenom efter virus med antivirusprogram från Avast.
https://www.avast.com/antivirus

[Pietro Vassalli]

Unable to bind to server ldap://localhost:389 with dn

is dirsrv working?

service dirsrv status

in which way is ldap connect queried?

ldapsearch -x -D "uid=youruser,ou=People,dc=yourdomain,dc=yoursuffix" -w
YOURPASSWORD -b "dc=yourdomain,dc=yoursuffix"

what do you get?

warning: dict_ldap_connect: Unable to bind to server ldap://localhost:389 with dn uid=kolab-service,ou=Special Users,dc=XXXyr,dc=se: -5 (Timed out)
any input is welcome
I tested disable wallace = mails starts to come in but does not get delivierd outgoing is a no no
comment out wallace in master.cf like this
# Filter email through Amavisd
smtp-amavis unix - - n - 3 smtp
-o smtp_data_done_timeout=1800
-o disable_dns_lookups=yes
-o smtp_send_xforward_command=yes
-o max_use=20
-o smtp_bind_address=127.0.0.1
# Listener to re-inject email from Amavisd into Postfix
127.0.0.1:10025 inet n - n - 100 smtpd
-o cleanup_service_name=cleanup_internal
#-o content_filter=smtp-wallace:[127.0.0.1]:10026
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o smtpd_authorized_xforward_hosts=127.0.0.0/8
# Filter email through Wallace
#smtp-wallace unix - - n - 3 smtp
# -o smtp_data_done_timeout=1800
# -o disable_dns_lookups=yes
# -o smtp_send_xforward_command=yes
# -o max_use=20
# Listener to re-inject email from Wallace into Postfix
#127.0.0.1:10027 inet n - n - 100 smtpd
# -o cleanup_service_name=cleanup_internal
# -o content_filter=
# -o local_recipient_maps=
#-o relay_recipient_maps=
# -o smtpd_restriction_classes=
# -o smtpd_client_restrictions=
# -o smtpd_helo_restrictions=
# -o smtpd_sender_restrictions=
# -o smtpd_recipient_restrictions=permit_mynetworks,reject
# -o mynetworks=127.0.0.0/8
# -o smtpd_authorized_xforward_hosts=127.0.0.0/8
mail still does not get delivered or sent
any input ?
---
Detta e-postmeddelande har sökts igenom efter virus med antivirusprogram från Avast.
https://www.avast.com/antivirus
_______________________________________________
users mailing list
https://lists.kolab.org/mailman/listinfo/users

CAUTION - This message may contain privileged and confidential
information intended only for the use of the addressee named above. If
you are not the intended recipient of this message you are hereby
notified that any use, dissemination, distribution or reproduction of
this message is prohibited. If you have received this message in error
please notify WATER-LINE SA immediately. Any views expressed in this
message are those of the individual sender and may not necessarily
reflect the views of WATER-LINE SA.