Hello.
I use FreeIPA and encountered a 389ds connection problem when new hosts was
added to FreeIPA server with the rate of 14 hosts per min.
I don't know how many times FreeIPA server actually accesses LDAP in this
scenario.
Can you give us advice to resolve my problem, with regard to following logs?
I'd like to find out configuration to fix this error.
=========
access log
[18/Jan/2024:23:34:13.087718471 +0000] conn=788 fd=258 slot=258 connection from
52.78.30.18 to 34.84.136.11
[18/Jan/2024:23:34:13.088018506 +0000] conn=788 op=0 EXT
oid="1.3.6.1.4.1.1466.20037" name="start_tls_plugin"
[18/Jan/2024:23:34:13.088053934 +0000] conn=788 op=0 RESULT err=0 tag=120
nentries=0
wtime=0.000228592 optime=0.000040018 etime=0.000268106
[18/Jan/2024:23:34:13.158931686 +0000] conn=788 TLS1.3 128-bit AES-GCM
[18/Jan/2024:23:34:13.159223459 +0000] conn=788 op=-1 fd=258 Disconnect - Bad
Ber Tag or
uncleanly closed connection - B1
security log
{ "date": "[18\/Jan\/2024:23:34:13.159227408 +0000] ",
"utc_time": "1705620853.159227408", "event":
"TCP_ERROR", "client_ip": "52.78.30.18",
"server_ip": "34.84.136.11", "ldap_version": 3,
"conn_id": 788, "msg": "Bad Ber Tag or uncleanly closed
connection - B1" }
=========
I tested with FreeIpa fedora-39-4.11.0 docker with the recent version of 389ds.
ldapsearch -V
ldapsearch: @(#) $OpenLDAP: ldapsearch 2.6.6 (Jul 31 2023 00:00:00) $
Thank you.
JHK
--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
Do not reply to spam, report it:
https://pagure.io/fedora-infrastructure/new_issue
