Previously, the nucn-stans framework was enabled by default in Directory Server, but the framework is not stable. As a consequence, deadlocks and file descriptor leaks could occur. This update changes the default value of the nsslapd-enable-nunc-stans parameter to "off". As a result, Directory Server is now stable.
This bug has been copied from bug #1614501 and has been proposed to be backported to 7.5 z-stream (EUS).
Build tested: 389-ds-base-188.8.131.52-26.el7_5.x86_64
On a fresh instance:
[root@server ds]# ldapsearch -xLLL -D cn=Directory\ Manager -w password -b cn=config -s base nsslapd-enable-nunc-stans
[root@server ds]# pstack $(pidof ns-slapd) | grep 'nunc-stans\|ns_' -c
Nunc-stans is disabled by default, marking as VERIFIED.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.