Bug 58719 - group modification fails due to lmdb maxsize limitation (Backport for 5.0)
Summary: group modification fails due to lmdb maxsize limitation (Backport for 5.0)
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: LDAP
Version: UCS 5.2
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.0-10-errata
Assignee: Johannes Königer
QA Contact: Arvid Requate
URL: https://git.knut.univention.de/univen...
Keywords:
Depends on: 58668
Blocks:
  Show dependency treegraph
 
Reported: 2025-10-15 12:03 CEST by Johannes Königer
Modified: 2025-10-22 15:40 CEST (History)
7 users (show)

See Also:
What kind of report is it?: Bug Report
What type of bug is this?: 7: Crash: Bug causes crash or data loss
Who will be affected by this bug?: 2: Will only affect a few installed domains
How will those affected feel about the bug?: 3: A User would likely not purchase the product
User Pain: 0.240
Enterprise Customer affected?: Yes
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2025092521000048
Bug group (optional):
Customer ID: 273443
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Johannes Königer univentionstaff 2025-10-15 12:03:01 CEST
+++ This bug was initially created as a clone of Bug #58668 +++

background:
Modifying a group with around 36k users failed with an ldap error:

_ldap_modify: Other (e.g., implementation specific) error (80) _


The nagios check said:
SLAPD MDB OK: Database /var/lib/univention-ldap/ldap operational (in fact 35.7%)

There we had the default UCR:
ldap/database/mdb/maxsize: 4295000000

After increasing the ldap/database/mdb/maxsize: 5295000000 the group could be modified.

The nagios check itself was misleading.

We should adjust the warning levels for nagios and prometheus checks.

> A good rule of thumb is to multiply the total database size by five.
https://www.symas.com/post/openldap-lmdb-sizing-guide

The administrator has no idea which group sizes/(other operations?) are "OK" for which ldap database size.
Is there a way to estimate whether the remaining available space is enough to allow for modifications of present ldap objects? (At least for the largest object in LDAP).
If so we should provide a monitoring script.
Comment 1 Arvid Requate univentionstaff 2025-10-21 19:56:08 CEST
Backport of Bug #58668 to 5.0-10

8ed6dd08fc5 | feat(nagios): Improve check_univention_slapd_mdb_maxsize
d8fbe5505d2 | feat(monitoring): Improve alerts/check_univention_mdb_maxsize

Package: univention-nagios
Version: 13.0.11-1
Release: 5.0-0
Scope: errata5.0-10

Package: univention-monitoring-client
Version: 1.0.8-1
Release: 5.0-0
Scope: errata5.0-10
Comment 2 Arvid Requate univentionstaff 2025-10-22 11:35:05 CEST
Verified:
* Backport merge
* Package update
* Functional check
* Advisory