Bug 591419

Summary: OpenLDAP connection freeze when using TLS
Product: Red Hat Enterprise Linux 5 Reporter: Jan Zeleny <jzeleny>
Component: openldapAssignee: Jan Vcelak <jvcelak>
Status: CLOSED ERRATA QA Contact: Ondrej Moriš <omoris>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 5.5CC: blomqvist.janne, cww, dspurek, ebenes, jeffblank, jnansi, jplans, jwest, ovasik, tao, tmarshal, tsmetana
Target Milestone: rcKeywords: Regression, ZStream
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: openldap-2.3.43-15.el5 Doc Type: Bug Fix
Doc Text:
- TLS connection to OpenLDAP server is created - the connection freezes for about three seconds - upstream patch applied to target this issue - the TLS connection to OpenLDAP server will not freeze for thee seconds after it is created
 Story Points: ---
Clone Of:
: 608112 (view as bug list) Environment:
Last Closed: 2012-02-21 05:26:06 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 608112, 653910    
Attachments:
Description Flags
Updated upstream patch none

Description Jan Zeleny 2010-05-12 08:25:35 UTC 
As a regression of fixed bug 509230, connection to slapd freezes for about 3 seconds every time it is made. Error output of slapd is filled with these messages:

tls_read: want=5 error=Resource temporarily unavailable

slapd runs at 100% CPU during that time. Package without the patch works fine.
Comment 1 Jan Zeleny 2010-05-12 08:30:05 UTC 
Created attachment 413353 [details]
Updated upstream patch

I found that the original upstream patch was flawed. After creating my own patch I discovered there is already very similar upstream fix of this issue. This attachment is the upstream fix.
Comment 3 Jatin Nansi 2010-05-13 01:59:12 UTC 
*** Bug 591755 has been marked as a duplicate of this bug. ***
Comment 6 Jeffrey Blank 2010-08-23 02:47:15 UTC 
I have experienced the same problem, the one noted by Chris at https://bugzilla.redhat.com/show_bug.cgi?id=509230#c11 . 

I have also successfully reverted to an older package to avoid this problem (instead of configuring to disable TLS on the current version, which can also avoid the problem, but is obviously not desirable).

Please indicate if additional information would be helpful, or if a package update is expected for 5.5.  I also have debug traces, which are similar to the ones Chris posted.  I am also happy to share config files or other setup info, which are fairly simple.  Thanks!
Comment 10 Jan Vcelak 2010-11-16 12:58:40 UTC 
Fixed and built.
Comment 17 Jan Vcelak 2011-08-26 13:43:55 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
- TLS connection to OpenLDAP server is created
- the connection freezes for about three seconds
- upstream patch applied to target this issue
- the TLS connection to OpenLDAP server will not freeze for thee seconds after it is created
Comment 20 errata-xmlrpc 2012-02-21 05:26:06 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0155.html