On 19 Dec 2020, at 03:53, Oleg Cohen oleg.cohen@assurebridge.com wrote:
Greetings,
I run a Java application. From time to time I start seeing the following error in the logs:
LDAP: error code 12 - Unavailable Critical Extension
I have a three node 389-DS cluster and don't see any errors in the respective 389 DS logs.
If you look at logconv.pl it may help you find the error in the log, because we should log when a critical extension isn't present.
The restart of the Java application seems to resolve the issue.
Wondering if anybody has seen this error before and how to debug/remediate.
There are lots of things that can cause it, but some options are:
* Check how your application connects. StartTLS is an extension which would be critical, but StartTLS is also not reliable IMO, so you should consider LDAPS instead. * You could wireshark and check what is going on * If you use a load balancer, check if it's protocol aware and altering the traffic * Check your logs for traffic from the IP of the java application, not the conn+op numbers, then look for those in the logs to trace "what kind of operations" are being performed. * Look for correlations in the java application log about what it is attempting at the time of the error.
Thanks! Oleg _______________________________________________ 389-users mailing list -- 389-users@lists.fedoraproject.org To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject....
— Sincerely,
William Brown
Senior Software Engineer, 389 Directory Server SUSE Labs, Australia