LDAP going crazy after some time

["Bojan Zdrnja" <b.zdrnja@auckland.ac.nz>]

Hi,

At the moment I'm running LDAP which servers as authentication for ~7000
users.
This authentication works over saslauthd for cyrus imap and everything works
fine.

The package I have installed is openldap-2.0.11-13 on Redhat 7.3.

Most of the time everything works ok, but from time to time slapd goes crazy
eating 99% CPU on machine.
At that time saslauthd fails on authentication and users get rejected.

I caught slapd during that and just did a small strace, here are results:

read(12, "\4\0\0\0Q\0\0\0\257_5\1R\0\0\0\256\337E\1i\0\0\0\227\37"..., 4096)
= 4096
time([1061262760])                      = 1061262760
time([1061262760])                      = 1061262760
lseek(12, 5521408, SEEK_SET)            = 5521408
read(12, "\6\0\0\0\34\0\0\0\344/=\1\37\0\0\0\335-\36\1 \0\0\0\340"..., 4096)
= 4096
time([1061262760])                      = 1061262760
time([1061262760])                      = 1061262760
lseek(12, 5529600, SEEK_SET)            = 5529600
read(12, "\5\0\0\0009\0\0\0\307ON\1L\0\0\0\264\2778\1u\0\0\0\213"..., 4096)
= 4096
time([1061262760])                      = 1061262760
time([1061262760])                      = 1061262760
lseek(12, 5709824, SEEK_SET)            = 5709824
read(12, "\5\0\0\0\27\0\0\0\32\27D\1l\0\0\0\224o5\1q\0\0\0\217\357"...,
4096) = 4096

... And so on. This usually continues for couple of minutes (or until I
restart the service).

Is there any explanation for this? Or should I upgrade openldap to more
current version?

Thanks in advance,

Bojan Zdrnja