Package: nslcd
Version: 0.9.7
Severity: serious

When restarting the OpenLDAP server, nslcd often crashes on multiple
servers with the following messages logged (I know they're not helpful
but it's what I have at the moment):

nslcd[14819]: segfault at 0 ip 00007fdc51502ce4 sp 00007fdc4e553fe0
error 4 in libsasl2.so.2.0.25[7fdc514fb000+1a000]
traps: nslcd[10619] general protection ip:7f0977bd322b sp:7f0974465bb0
error:0 in libc-2.24.so[7f0977b5c000+195000]

My config is this:

----->8 SNIP 8<-----
# /etc/nslcd.conf
# nslcd configuration file. See nslcd.conf(5)
# for details.

# The user and group nslcd should run as.
uid nslcd
gid nslcd

# The location at which the LDAP server(s) should be reachable.
uri ldaps://uxie.glpgs.io/

# The search base that will be used for all queries.
base dc=glpgs,dc=io

# The LDAP protocol version to use.
#ldap_version 3

# The DN to bind with for normal lookups.
#binddn cn=proxy,dc=glpgs,dc=io

# The DN used for password modifications by root.
#rootpwmoddn cn=admin,dc=example,dc=com

# SSL options
ssl yes
sasl_mech EXTERNAL
tls_reqcert demand
tls_cacertfile /etc/ssl/certs/cacert.pem
tls_key /etc/ssl/private/alakazam_ldap.key
tls_cert /etc/ssl/certs/alakazam_ldap.pem

# The search scope.
scope sub
base passwd ou=people,dc=glpgs,dc=io
base shadow ou=people,dc=glpgs,dc=io
base group ou=groups,dc=glpgs,dc=io

pam_authz_search
(&(objectClass=posixAccount)(uid=$username)(memberOf=cn=database,ou=groups,dc=glpgs,dc=io))
----->8 SNIP 8<-----

When it crashes, systemd does not automatically restart the process,
which may be a separate issue.

Cheers,
Elizabeth

Reply via email to