Package: 389-ds-base Version: 1.4.4.11-2 Severity: normal Dear Maintainer,
I recently noticed that the systemd unit file distributed with this package does not specify any Restart= policy. According to the systemd documentation, this means the implicit default of Restart=no is used. This is rather sad, as any bug in the server (such as one that leads to its segfault) will render the service disabled without recovering automatically. I've recently ran into that situation: Jan 16 16:17:07 REDACTED ns-slapd[166]: [16/Jan/2023:16:17:07.675187250 +0000] - NOTICE - bdb_db_compact_one_db - compactdb: compact userRoot - 1 pages freed Jan 16 16:17:07 REDACTED systemd[1]: dirsrv@ldap.service: Main process exited, code=killed, status=11/SEGV Jan 16 16:17:07 REDACTED systemd[1]: dirsrv@ldap.service: Failed with result 'signal'. Jan 16 16:17:07 REDACTED systemd[1]: dirsrv@ldap.service: Consumed 3h 5min 10.445s CPU time. Now of course in an ideal world processed would never segfault. However, that's besides the point. A vital service like LDAP should attempt to recover/respawn after it crashes for whatever reason. So I would like to suggest that a "Restart=always" line is added to the dirsrv@.service file. -- System Information: Debian Release: 11.6 APT prefers stable-security APT policy: (500, 'stable-security'), (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 5.10.0-16-amd64 (SMP w/8 CPU threads) Kernel taint flags: TAINT_FIRMWARE_WORKAROUND Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages 389-ds-base depends on: ii 389-ds-base-libs 1.4.4.11-2 ii acl 2.2.53-10 ii adduser 3.118 ii debconf [debconf-2.0] 1.5.77 ii ldap-utils 2.4.57+dfsg-3+deb11u1 ii libc6 2.31-13+deb11u5 ii libcrypt1 1:4.4.18-4 ii libdb5.3 5.3.28+dfsg1-0.8 ii libicu67 67.1-7 ii libldap-2.4-2 2.4.57+dfsg-3+deb11u1 ii libmozilla-ldap-perl 1.5.3-3+b2 ii libnetaddr-ip-perl 4.079+dfsg-1+b5 ii libnspr4 2:4.29-1 ii libnss3 2:3.61-1+deb11u2 ii libpam0g 1.4.0-9+deb11u1 ii libsasl2-2 2.1.27+dfsg-2.1+deb11u1 ii libsasl2-modules-gssapi-mit 2.1.27+dfsg-2.1+deb11u1 ii libsnmp40 5.9+dfsg-4+deb11u1 ii libsocket-getaddrinfo-perl 0.22-3 ii libsystemd0 247.3-7+deb11u1 ii perl 5.32.1-4+deb11u2 ii python3 3.9.2-3 ii python3-lib389 1.4.4.11-2 ii python3-selinux 3.1-3 ii python3-semanage 3.1-1+b2 ii python3-sepolicy 3.1-1 ii systemd 247.3-7+deb11u1 389-ds-base recommends no packages. 389-ds-base suggests no packages. -- Configuration Files: /etc/dirsrv/config/certmap.conf [Errno 13] Permission denied: '/etc/dirsrv/config/certmap.conf' /etc/dirsrv/config/ldap-agent.conf [Errno 13] Permission denied: '/etc/dirsrv/config/ldap-agent.conf' /etc/dirsrv/config/slapd-collations.conf [Errno 13] Permission denied: '/etc/dirsrv/config/slapd-collations.conf' /etc/dirsrv/config/template-initconfig [Errno 13] Permission denied: '/etc/dirsrv/config/template-initconfig' /etc/dirsrv/schema/99user.ldif [Errno 13] Permission denied: '/etc/dirsrv/schema/99user.ldif' -- no debconf information
