LDAP stopping without apparent reason

[Márcio Luciano Donada <mdonada@auroraalimentos.com.br>]

Hi list,
We have a service ldap, version 2.4.11-1, debian lenny, but the times
have been falling and does not even have a message in the log about the
fall of it. Use it for e-mail service, jabber, ftp, and website. In the
logs I have the following message:

Aug  8 09:34:41 ldap slapd[15338]: connection_input: conn=1332300
deferring operation: binding
Aug  8 09:34:42 ldap slapd[15338]: connection_input: conn=1332301
deferring operation: binding
Aug  8 09:47:46 ldap slapd[15338]: slap_global_control: unrecognized
control: 1.3.6.1.4.1.42.2.27.8.5.1

My configuration

allow bind_v2

include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/inetorgperson.schema
include         /etc/ldap/schema/java.schema
include         /etc/ldap/schema/misc.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/openldap.schema
include         /etc/ldap/schema/samba.schema
include         /etc/ldap/schema/qmail.schema
include         /etc/ldap/schema/authldap.schema
include         /etc/ldap/schema/RADIUS-LDAPv3.schema

pidfile         /var/run/slapd/slapd.pid

argsfile        /var/run/slapd/slapd.args

loglevel       1024

modulepath      /usr/lib/ldap
moduleload      back_hdb

TLSVerifyClient demand
TLSCACertificateFile    /etc/ldap/ssl/server.pem
TLSCertificateFile      /etc/ldap/ssl/server.pem
TLSCertificateKeyFile   /etc/ldap/ssl/server.pem


tool-threads    16
threads         32
backend         hdb


database        hdb

suffix          "dc=auroraalimentos,dc=com,dc=br"
rootdn          "cn=suporte,dc=auroraalimentos,dc=com,dc=br"
rootpw          secret

directory       "/var/lib/ldap"
idletimeout     30
timelimit       320
schemacheck     on
checkpoint      1024    5
cachesize       100000


dbconfig set_cachesize 0 2097152 0



lastmod         on




sizelimit unlimited

index   objectClass     eq
index   cn              pres,sub,eq
index   sn              pres,sub,eq
index   uid             pres,sub,eq
index   displayName     pres,sub,eq
index   uniqueMember    eq
index   uidNumber       eq
index   gidNumber       eq
index   memberUID       eq
index   mailAlternateAddress    eq
index   MailForwardingAddress   eq
index   mail    pres,eq
index   default sub
index   sambaSID,sambaPrimaryGroupSID,sambaDomainName   eq
index   sambaSIDList,sambaGroupType     eq
index   givenName       eq

access  to attrs=userPassword,sambaLMPassword,sambaNTPassword
        by self write
        by anonymous auth
        by * none

access to *
        by self write
        by users read
        by * read


when the service to have a big problem, mainly because the e-mail
service is affected. thanks
-- 
Márcio Luciano Donada <mdonada at auroraalimentos dot com dot br>
Aurora Alimentos - Cooperativa Central Oeste Catarinense
Departamento de T.I.