Bug 2245946

Summary: After an upgrade the LDAP server won't start if nsslapd-conntablesize is present in the dse.ldif file [11.8]
Product: Red Hat Directory Server Reporter: thierry bordaz <tbordaz>
Component: 389-ds-baseAssignee: thierry bordaz <tbordaz>
Status: CLOSED ERRATA QA Contact: LDAP QA Team <idm-ds-qe-bugs>
Severity: medium Docs Contact: Evgenia Martynyuk <emartyny>
Priority: unspecified    
Version: 11.8CC: emartyny, idm-ds-dev-bugs, idm-ds-qe-bugs, mreynolds, musoni, vashirov
Target Milestone: DS11.8Keywords: TestCaseProvided, Triaged
Target Release: dirsrv-11.8   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: sync-to-jira
Fixed In Version: redhat-ds-11-8090020231109153440.91529cd0 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 2245942
: 2256585 2265539 (view as bug list) Environment:
Last Closed: 2023-11-28 10:09:21 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2245942    
Bug Blocks: 2256585, 2265539    

Description thierry bordaz 2023-10-24 17:30:13 UTC 
+++ This bug was initially created as a clone of Bug #2245942 +++

Description of problem:
After an OS upgrade, the LDAP server won't start.

One needs to remove the nsslapd-conntablesize definition from the /etc/dirsrv/slapd-<INSTANCE>/dse.ldif before the server could be started.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
Configure a custom value for the CT size ( so the configuration parameter nsslapd-conntablesize is present in the dse.ldif file )
Upgrade the system
The LDAP server won't start after the upgrade
From the errors log:
[17/Oct/2023:14:45:29.422170234 +0200] - ERR - dse_read_one_file - The entry cn=config in file /etc/dirsrv/slapd-<INSTANCE>/dse.ldif (lineno: 17) is invalid, error code 1 (Operations error) - User setting of nsslapd-conntablesize attribute is disabled, server has auto calculated its value to 0.
[17/Oct/2023:14:45:29.493095110 +0200] - ERR - init_dse_file - Could not load config file [dse.ldif]
[17/Oct/2023:14:45:29.494808167 +0200] - ERR - setup_internal_backends - Please edit the file to correct the reported problems and then restart the server.

Actual results:
Server fails to start after the upgrade


Expected results:
Server should start after the upgrade


Additional info:
Comment 1 thierry bordaz 2023-10-24 17:32:47 UTC 
The fix is pushed upstream => POST
Comment 6 Viktor Ashirov 2023-11-09 12:17:41 UTC 
Build tested:
389-ds-base-1.4.3.37-6.module+el8dsrv+20535+685d3379.x86_64

Server fails to start:
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.763650084 -0500] - INFO - main - 389-Directory/1.4.3.37 B2023.299.1226 starting up
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.784778397 -0500] - INFO - main - Setting the maximum file descriptor limit to: 262144
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.964609428 -0500] - INFO - PBKDF2_SHA256 - Based on CPU performance, chose 2048 rounds
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.973869260 -0500] - INFO - bdb_config_upgrade_dse_info - create config entry from old config
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.979087471 -0500] - NOTICE - ldbm_back_start - found 1806912k physical memory
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.981610673 -0500] - NOTICE - ldbm_back_start - found 1392252k available
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.983785076 -0500] - NOTICE - ldbm_back_start - cache autosizing: db cache: 112932k
Nov 09 06:38:55 ns-slapd[29484]: [09/Nov/2023:06:38:55.985787779 -0500] - NOTICE - ldbm_back_start - total cache size: 92513894 B;
Nov 09 06:38:56 ns-slapd[29484]: [09/Nov/2023:06:38:56.043204784 -0500] - ERR - slapd_daemon - Not enough available file descriuptors

(gdb) p maxdesc
$1 = 262144
(gdb) p resrvdesc
$2 = 64
(gdb) p conntable_size
$3 = 0

For some reason conntable_size is 0. Even if I increase the limits:
# systemctl show dirsrv@localhost  | grep LimitNOFILE
LimitNOFILE=infinity
LimitNOFILESoft=infinity

Moving to ASSIGNED.
Comment 7 Viktor Ashirov 2023-11-09 16:47:30 UTC 
Automated test passed on the new build:

============================================================= test session starts =============================================================
platform linux -- Python 3.6.8, pytest-3.4.2, py-1.5.3, pluggy-0.6.0 -- /usr/libexec/platform-python
cachedir: dirsrvtests/.pytest_cache
389-ds-base: 1.4.3.37-7.module+el8dsrv+20631+5a3df0a9
nss: 3.90.0-3.el8_8
nspr: 4.35.0-1.el8_8
openldap: 2.4.46-18.el8
cyrus-sasl: not installed
FIPS: disabled
rootdir: /root/ds/dirsrvtests, inifile: pytest.ini
collected 1 item

dirsrvtests/tests/suites/basic/basic_test.py::test_conntablesize_attr_dse PASSED                                                        [100%]

========================================================== 1 passed in 27.57 seconds ==========================================================

Marking as VERIFIED.
Comment 9 errata-xmlrpc 2023-11-28 10:09:21 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (redhat-ds:11 bug fix and enhancement update), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2023:7519