LDAP server down cron email since upgrade - no idea why

I don’t know if this is directly related to the last upgrade as I only starting receiving these emails when I updated the root email alias on this node. I have three UCS servers, two are for AD, the third is off-site and only for LDAP authentication connected to the primary via high speed VPN.

I am now receiving hundreds of these a day now and I cannot find anything wrong. LDAP is up and working on both UCS1 and UCS2 servers (verified with Apache Directory Studio, and my applications using LDAP authentication)

It seems to be related to NFS but I don’t have any mounts or exports on this server at all.

subject: Cron <root@ucs3>   /usr/share/univention-directory-policy/univention-directory-policy-cron


Traceback (most recent call last):
  File "/usr/lib/univention-directory-policy/nfsmounts", line 249, in <module>
    main()
  File "/usr/lib/univention-directory-policy/nfsmounts", line 124, in main
    lo = univention.uldap.getMachineConnection()
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 171, in getMachineConnection
    return access(host=ucr['ldap/master'], port=port, base=ucr['ldap/base'], binddn=ucr['ldap/hostdn'], bindpw=bindpw, start_tls=start_tls, decode_ignorelist=decode_ignorelist, reconnect=reconnect)
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 275, in __init__
    self.__open(ca_certfile)
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 359, in __open
    self.__starttls()
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 199, in _decorated
    return func(self, *args, **kwargs)
  File "/usr/lib/python2.7/dist-packages/univention/uldap.py", line 373, in __starttls
    self.lo.start_tls_s()
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 954, in start_tls_s
    res = self._apply_method_s(SimpleLDAPObject.start_tls_s,*args,**kwargs)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 935, in _apply_method_s
    self.reconnect(self._uri,retry_max=self._retry_max,retry_delay=self._retry_delay)
  File "/usr/lib/python2.7/dist-packages/ldap/ldapobject.py", line 911, in reconnect
    raise e
ldap.SERVER_DOWN: {'desc': "Can't contact LDAP server"}
run-parts: /usr/lib/univention-directory-policy/nfsmounts exited with return code 1

I’m not sure where to begin looking for the issue… I’ve checked all the normal things such as join status and System Diagnostic, both of which show no issues whatsoever.

Thanks for anything you can point me to look at.

some addional info i’ve gleened from other posts:

root@ucs3:~# ucr get server/role
domaincontroller_backup
root@ucs3:~#

root@ucs3:~# univention-upgrade

Starting univention-upgrade. Current UCS version is 4.4-3 errata413

Checking for local repository:                          none
Checking for package updates:                           none
Checking for app updates:                               none
Checking for release updates:                           none
root@ucs3:~#