Suddenly LDAP gone
I was mucking about on the server installing a new version of mysql. At one point I restarted the server. This morning all the client accounts are locked out. Server shows LDAP service is unavailable with the LDAP server stopped. Lookupd, Password Server, and Kerberos are running, and NeiInfo Server is Local only.
About that time I had been in server config and deselected an option to disable login after so many failed attempts at log-in which I thought was an innocuous change.
The logs in the slapconfig log showed
2007-04-27 08:59:24 -0500 - slapconfig -setmacosxodpolicy
2007-04-27 08:59:24 -0500 - command: /usr/bin/ldapadd -c -x -H ldapi://%2Fvar%2Frun%2Fldapi
2007-04-27 08:59:25 -0500 - slapconfig -setldapconfig
2007-04-27 08:59:25 -0500 - Stopping LDAP server (slapd)
2007-04-27 08:59:27 -0500 - Starting LDAP server (slapd)
2007-04-27 09:04:33 -0500 - slapconfig -setldapconfig
2007-04-27 09:04:33 -0500 - command: /usr/sbin/mkpassdb -setreplicationinterval 300 SyncDefault
2007-04-27 09:04:33 -0500 - slapconfig -setldapconfig
2007-04-27 09:04:33 -0500 - Stopping LDAP server (slapd)
2007-04-27 09:04:35 -0500 - Moving database from /var/db/openldap/openldap-data to /var/db/openldap/openldap-data
2007-04-27 09:04:35 -0500 - Removed file at path /var/db/openldap/openldap-data/__db.001.
2007-04-27 09:04:35 -0500 - Error moving database from /var/db/openldap/openldap-data to /var/db/openldap/openldap-data
2007-04-27 09:11:05 -0500 - slapconfig -setmacosxodpolicy
2007-04-27 09:12:15 -0500 - slapconfig -setmacosxodpolicy
2007-04-27 09:13:50 -0500 - slapconfig -setmacosxodpolicy
2007-04-27 09:13:50 -0500 - slapconfig -setldapconfig
2007-04-27 09:26:15 -0500 - slapconfig -backupdb
where at 08:59:24 I think I changed a policy. at 9:26:15 I figured I better backup lest I mess stuff up even more.
The LDAP log shows
Apr 27 08:59:25 ngi slapd[74]: slapd shutdown: waiting for 1 threads to terminate\n
Apr 27 08:59:25 ngi slapd[74]: bdb(dc=ngi,dc=server): Locker still has locks\n
Apr 27 08:59:25 ngi slapd[74]: bdb_locker_id_free: 9 err Invalid argument(22)\n
Apr 27 08:59:26 ngi slapd[74]: slapd stopped.\n
Apr 27 08:59:27 ngi slapd[1730]: @(#) $OpenLDAP: slapd 2.2.19 $\n
Apr 27 08:59:27 ngi slapd[1730]: bdb_back_initialize: Sleepycat Software: Berkeley DB 4.2.52: (December 3, 2003)\n
Apr 27 08:59:28 ngi slapd[1730]: bdb_db_init: Initializing BDB database\n
Apr 27 08:59:28 ngi slapd[1730]: slapd starting\n
Apr 27 09:04:33 ngi slapd[1730]: slapd shutdown: waiting for 0 threads to terminate\n
Apr 27 09:04:33 ngi slapd[1730]: bdb(dc=ngi,dc=server): Locker still has locks\n
Apr 27 09:04:33 ngi slapd[1730]: bdb_locker_id_free: 9 err Invalid argument(22)\n
Apr 27 09:04:34 ngi slapd[1730]: slapd stopped.\n
which I think are the relevant entries.
Any thoughts on where I need to start on this? It seemed the Locker still has locks is a clue, but I cannot find what that implies.
Steve
(BTW, permissions on the openldap data dir are:
ngi:/var/db/openldap myname$ ls -l
total 0
drw------- 23 root wheel 782 Apr 27 18:10 openldap-data
drwx------ 2 root wheel 68 Mar 25 2005 openldap-slurp
drwxr-xr-x 2 root wheel 68 Mar 25 2005 run
)