OpenDJ hangs and does not take in any more connections

This topic has 5 replies, 4 voices, and was last updated 4 years, 9 months ago by Ludo.

  • Author
    Posts
  • #19939
     sumandevin
    Participant

    Hi,

    We have an OpenAM server connected to an external OpenDJ server.
    Recently, we have been observing the below error, after which OpenDJ does not accept any new connections and stays hung on this state.

    “A bind operation is currently in progress on the associated client connection. No other requests may be made on this client connection until the bind processing has completed.”

    What are the possible reasons for this error message to come up?

    Additional Details: We have a one time process which feeds it close to ~7k entries at one shot. We have checked that all connections are closed following this migration. Though OpenDJ runs for a short while after this data migration, just want to make sure if pouring in a lot of data at once might have anything to do with the error.

    • This topic was modified 4 years, 10 months ago by sumandevin.
    #20055
     sumandevin
    Participant

    We also created a new OpenDJ instance with very few entries. We still faced this issue.

    #20079
     Bill Nelson
    Participant

    The ‘bind in progress’ error returned by the server indicates either 1) the client is misbehaving by sending a request before the result of the bind has been received, and/or 2) the server is incorrectly detecting a bind in progress.

    What version of DJ are you running?

    How are you loading your 7K entries ‘in one shot’?

    Have you turned on debug logging in DJ and are you seeing any interesting messages in the debug logs?

    #20083
     Ludo
    Moderator

    The “Bind in Progress” error returned is a requirement of the LDAP specifications. A client MUST wait for the Bind response to be received before sending further requests on a connection (and the server MUST reject such requests it receives while processing a Bind request) on that same connection.

    #20117
     rezaansyed
    Participant

    Having the same issue.

    Reading up on here: http://www.janua.fr/openam-caching-mechanism-and-persistent-search/

    It seems as though OpenAM is only supposed to open up a single psearch connection with OpenDJ. After that, any changes to the LDAP directory will be updated to OpenAM. But looking at the logs and the configuration, it seems as though OpenAM by default sends a bind request every 10 seconds. Is it likely that because some of the bind requests are not completed before another one is received, it could lead to this issue?

    • This reply was modified 4 years, 9 months ago by rezaansyed.
    #20333
     Ludo
    Moderator

    A Bind request should complete in less than 10 seconds (and most likely in less than 10ms).
    But, yes, if a Bind request is blocked and any other request is sent on the same connection, then the server will reject it with the error.

Viewing 6 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.

©2022 ForgeRock - we provide an identity and access platform to secure every online relationship for the enterprise market, educational sector and even entire countries. Click to view our privacy policy and terms of use.

Log in with your credentials

Forgot your details?