Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-83852

LDAP high CPU usage while handling indexes with IDL scan limit at INT_MAX

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Blocker Blocker
    • rhel-10.2
    • rhel-8.10
    • 389-ds-base
    • None
    • None
    • Low
    • rhel-idm-ds
    • ssg_idm
    • None
    • None
    • x86_64
    • None

      What were you trying to do that didn't work?

      CPU usage for the LDAP server went wild under normal operations.
      The usage stayed high for hours until the IDL scan limit was decreased to a few thousands.

      What is the impact of this issue to you?

      The impact was pretty significant since the whole IdM cluster was not responding to client queries.
      Many applications were stopped or were hitting timeouts, having a huge impact on end customers.

      Please provide the package NVR for which the bug is seen:

       

      cat etc/redhat-release
      Red Hat Enterprise Linux release 8.10 (Ootpa)
      grep 389-ds installed-rpms
      389-ds-base-1.4.3.39-11.module+el8.10.0+22741+07f42c75.x86_64 Thu Feb 27 12:08:15 2025
      389-ds-base-libs-1.4.3.39-11.module+el8.10.0+22741+07f42c75.x86_64 Thu Feb 27 12:08:14 2025
      

       

      How reproducible is this bug?:

      The issue was happening for several days at customer site.

      Steps to reproduce

      Issue happened at a customer site.

      Expected results

      Working IdM cluster.

      Actual results

      LDAP server was taking lots of CPU making the IdM server unresponsive.

              tbordaz@redhat.com Thierry Bordaz
              rhn-support-tmihinto Têko Mihinto
              IdM DS Dev IdM DS Dev
              IdM DS QE IdM DS QE
              Evgenia Martyniuk Evgenia Martyniuk
              Votes:
              0 Vote for this issue
              Watchers:
              10 Start watching this issue

                Created:
                Updated: