The only solutions for me was to integrate the CR repository and upgrade to IPA 
4.1.0. Perhaps my problem was solved by 

'CVE-2015-1827' It was discovered that the IPA extdom Directory Server 
plug-in did not correctly perform memory reallocation when handling user 
account information. A request for a list of groups for a user that 
belongs to a large number of groups would cause a Directory Server to 

Anyway, after 5 days without any crash I'm very confident the the problem is 

----- Original Message -----

From: "Sankar Ramlingam" <> 
Sent: Friday, 27 March, 2015 4:32:53 PM 
Subject: Re: [Freeipa-users] Fwd: Unexpected IPA Crashes 

On 03/27/2015 01:42 PM, David Kreuter wrote: 

No, there are no entries with "segfaulter" neither in /var/log/messags nor in 

Meanwhile we encountered several directory server hangs and I was able to 
produce the stacktrace. Perhpas you can have a look. 

Hi David, 
You seem to have the latest/released version of 389-ds-base. You can probably 
try an upgrade to get the latest of other dependent components and 

-Sankar R. 


----- Original Message -----

From: "David Kreuter" <> 
To: "freeipa-users" <> 
Sent: Thursday, 26 March, 2015 11:18:59 PM 
Subject: Unexpected IPA Crashes 

We have been using FreeIPA since two years and were more than happy. But since 
two weeks we are facing unexpected crashed and can not really debug the strange 
behaviours. The crashes are definitely not caused by connecting a new system or 
changing the LDAP schema heavily. Following IPA is used: 

Name : ipa-server 
Arch : x86_64 
Version : 3.3.3 
Release : 28.0.1.el7.centos.3 
Size : 4.1 M 

I have followed the troubleshooting guide and 
activated logging and activated the core dumping. Unfortunately, I cannot 
provide you any core dump, because it is not created after the ipa servers 
crashes. I'm sure the dirsrv is causing the problem, because when i restart the 
389, then ipa works fine for a while. Currently I have activated the 
replication log level 8192. The error log shows no suspicious error or any 
fatal error. Following 389* versions are used: 

Installed Packages 
389-ds-base.x86_64 @/389-ds-base- 
389-ds-base-debuginfo.x86_64 @base-debuginfo 


Can you please provide some hint how I can debug this problem in more detail. 
Btw, the ipa infrastructure consist of one master and one replica. The server 
was also crashing, when the replica server was turned off. Do you thing an 
upgrade would solve the problem as the last resort? 


Manage your subscription for the Freeipa-users mailing list: 
Go to for more info on the project 
Manage your subscription for the Freeipa-users mailing list:
Go to for more info on the project

Reply via email to