Migrated from freeipa container rocky-8-4.9.13 to rocky-9-4.12.2 using Red Hat 
documentation:
https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html-single/migrating_to_identity_management_on_rhel_9/index

We didn't have this issue in 4.9.13 but now I'm seeing this error at least 
every minute. The client ip seems to be coming from within the pod/kubernetes 
and isn't pingable or resolvable. I can't find what that client ip is. Does 
anyone have any ideas?

We also aren't using large host groups like this thread mentioned:
https://lists.fedorahosted.org/archives/list/[email protected]/thread/R4TZBKUQPBYYWSXUIAVJYHGKC6RHVSEM/

/var/log/dirsrv/slapd-/security:
{ "date": "[03\/Nov\/2025:18:58:05.994695464 +0000] ", "utc_time": 
"1762196285.994695464", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 408840, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:18:59:05.994629117 +0000] ", "utc_time": 
"1762196345.994629117", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 408914, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:18:59:52.637722671 +0000] ", "utc_time": 
"1762196392.637722671", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 408968, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:19:00:05.995032019 +0000] ", "utc_time": 
"1762196405.995032019", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 408983, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:19:01:05.994405846 +0000] ", "utc_time": 
"1762196465.994405846", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 409068, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:19:02:05.995037939 +0000] ", "utc_time": 
"1762196525.995037939", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 409160, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:19:03:05.994388392 +0000] ", "utc_time": 
"1762196585.994388392", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 409229, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }
{ "date": "[03\/Nov\/2025:19:03:39.730243171 +0000] ", "utc_time": 
"1762196619.730243171", "event": "TCP_ERROR", "client_ip": "135.x.x.x", 
"server_ip": "192.x.x.x", "ldap_version": 3, "conn_id": 409275, "msg": "Bad Ber 
Tag or uncleanly closed connection - B1" }

Example connection logged in access log from security log.
/var/log/dirsrv/slapd-/access:
[03/Nov/2025:18:58:05.993069510 +0000] conn=408840 fd=376 slot=376 connection 
from 135.x.x.x to 192.x.x.x
[03/Nov/2025:18:58:05.994691456 +0000] conn=408840 op=-1 fd=376 Disconnect - 
Bad Ber Tag or uncleanly closed connection - B1
-- 
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedorahosted.org/archives/list/[email protected]
Do not reply to spam, report it: 
https://pagure.io/fedora-infrastructure/new_issue

Reply via email to