ldap.ts failing all connections at some point #591
Closed
opened 2025-04-27 05:58:33 +00:00 by raucao
·
2 comments
No Branch/Tag Specified
Labels
Clear labels
monitoring
bug
design
dev environment
docs
duplicate
enhancement
feature
good first issue
idea
invalid
kredits-1
kredits-2
kredits-3
on hold
ops
question
security
ui/ux
wontfix
service
discourse
Kosmos Community Forums
Infrastructure metrics, alerts, notifications, etc.
service
accounts
Kosmos Accounts
service
drone-ci
Kosmos Drone CI
service
email
mail.kosmos.org
service
garage
S3-compatible object storage
service
gitea
Kosmos Gitea
service
ipfs
Kosmos IPFS
service
lightning
Lightning address, lndhub, etc.
service
mastodon
kosmos.social
service
nostr
Relays, Blossom server, etc.
service
postgres
Database cluster
service
remotestorage
Portable data storage for the Web
service
wiki
Kosmos Wiki
service
xmpp
Kosmos Chat
Something is not working
Graphic/visual design
Config, builds, CI, deployment, etc.
Documentation
This issue or pull request already exists
Improving existing functionality
New functionality
Dive in, and start contributing
Something to consider
Not a bug
Small contribution
Medium contribution
Large contribution
Currently not actionable
Manual IT ops activities
Looking for an answer
release
major
release
minor
release
patch
All your base are belong to us
User interface, process design, etc.
This won't be fixed
No labels
bug
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Current operational issues
Solved
Notifications
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: kosmos/chef#591
Reference in New Issue
Block a user
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Happening for both the strfry plugin as well as substr.
There is no error message in the logs that I was able to directly connect to it breaking for subsequent connections. However, there are a handful of these messages in the substr logs:
Both are only using one of the servers. So maybe adding a second would already help.
Update: the strfry plugin's LDAP exceptions are now logged, and I also added one missing
unbindin the substr LDAP module.The feature has to be added to ldapts first: https://github.com/ldapts/ldapts/issues/182
I found the issue after it happened again and the exception was logged. Looks like it was this Deno bug:
https://github.com/denoland/deno/issues/29094
I updated Deno to the latest version. Let's see if it happens again.
I also saw a ton of failed writes on the relay, i.e. unauthorized clients trying to spam it. This seems to have triggered it, because Substr was still running fine. Similarly, I guess it could have been triggered exactly the same way with too many requests to Substr (i.e. the nostr.kosmos.org user/article pages).