Hello,
I have Solaris-10 running on x86 HP machine. Server went into hung state and when I reboot it, its ldap client service is not coming up. I tried clearing it, but still no luck.
# svcs -a | grep ldap
maintenance 16:58:02 svc:/network/ldap/client:default
# svcadm clear svc:/network/ldap/client:default
# cd /var/svc/log
# tail -f network-ldap-client:default.log
[ Jul 6 16:05:09 Method or service exit timed out. Killing contract 1369 ]
[ Jul 6 16:05:09 Method "start" failed due to signal KILL ]
[ Jul 6 16:56:02 Leaving maintenance because clear requested. ]
[ Jul 6 16:56:02 Enabled. ]
[ Jul 6 16:56:02 Executing start method ("/lib/svc/method/ldap-client start") ]
[ Jul 6 16:58:02 Method or service exit timed out. Killing contract 1396 ]
[ Jul 6 16:58:02 Method "start" failed due to signal KILL ]
[ Jul 6 17:07:24 Leaving maintenance because clear requested. ]
[ Jul 6 17:07:24 Enabled. ]
[ Jul 6 17:07:24 Executing start method ("/lib/svc/method/ldap-client start") ]
[ Jul 6 17:09:24 Method or service exit timed out. Killing contract 1412 ]
[ Jul 6 17:09:24 Method "start" failed due to signal KILL ]
^C
# svcs -a | grep ldap
maintenance 17:09:24 svc:/network/ldap/client:default
#
# /usr/lib/ldap/ldap_cachemgr -g
/usr/lib/ldap/ldap_cachemgr doesn't appear to be running.
# cat /var/ldap/ldap_client_file
#
# Do not edit this file manually; your changes will be lost.Please use ldapclient (1M) instead.
#
NS_LDAP_FILE_VERSION= 2.0
NS_LDAP_SEARCH_BASEDN= dc=pre,dc=doper,dc=com
NS_LDAP_AUTH= tls:simple
NS_LDAP_SEARCH_REF= TRUE
NS_LDAP_SEARCH_SCOPE= one
NS_LDAP_SEARCH_TIME= 30
NS_LDAP_SERVER_PREF= ngpre-wst-wks1.doper.com, ngpre-est-wks1.doper.com
NS_LDAP_PROFILE= ldap-client-30
NS_LDAP_CREDENTIAL_LEVEL= proxy
NS_LDAP_SERVICE_SEARCH_DESC= group:ou=Group,?one?
NS_LDAP_SERVICE_SEARCH_DESC= shadow:ou=People,?one?
NS_LDAP_SERVICE_SEARCH_DESC= netgroup:ou=netgroup,?one?
NS_LDAP_SERVICE_SEARCH_DESC= sudoers:ou=sudoers,?one?
NS_LDAP_SERVICE_SEARCH_DESC= user_attr:ou=People,?one?
NS_LDAP_SERVICE_SEARCH_DESC= passwd:ou=People,?one?isMemberOf=cn=ldap-client-30,ou=hosts,dc=pre,dc=doper,dc=com
NS_LDAP_BIND_TIME= 10
#
Please give me some pointer, what else I can check to fix this.
Thanks
Can you reach the two servers?
With ping ?
With telnet servername ldap ?
Look at the start script
/lib/svc/method/ldap-client
Is there a special log or output file? Then look at it.
Run its shell (given at the beginning in the "shebang") with -x and the start argument e.g.
I can ping and telnet on both ldap ports, these works fine.
There are 2 LDAP servers. But due to some old issue, only one LDAP connects since long time, when I am checking logs on various clients
When I ran command with -x , it stuck indefinitely at ldap_cachemgr