Univention Bugzilla – Bug 53601
Import of large ldif via LDAPI:// may fail
Last modified: 2021-08-10 01:38:43 CEST
When importing a large ldif via LDAPI:// the import can abort like this: # ldapmodify -x -H ldapi:// -f example.ldif modifying entry "cn=foo,ou=bar,dc=mydom,dc=com" ldapmodify: update failed: cn=foo,ou=bar,dc=mydom,dc=com ldap_modify: Can't contact LDAP server (-1) In this case it was necessary to temporarily increase sockbuf_max_incoming (as the connection is anonymous). Please be aware that this increases the possibility of DoS attacks, so it should only be a temporary measure. The purpose of this bug is mainly to document the knowledge for others running into this issue. We could additionally make sockbuf_max_incoming/sockbuf_max_incoming_auth configurable in slapd.conf to simplify this.