Slapd wont start after full drive

UCS - Univention Corporate Server
1

Hello all,

my UCS ran full, i cleared out smb backups, restarted it.
Then only RO mounts / cause the /etc/fstab was gone.
Replaced it with /proc/mount

But now slapd wont come up.
I can access via ssh and web.

systemctl start slapd:

Blockquote
root@dc:~# systemctl start slapd
Job for slapd.service failed because the control process exited with error code.
See “systemctl status slapd.service” and “journalctl -xe” for details.
root@dc:~# systemctl status slapd
● slapd.service - LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol)
Loaded: loaded (/etc/init.d/slapd; generated)
Active: failed (Result: exit-code) since Thu 2025-05-22 10:38:49 CEST; 6s ago
Docs: man:systemd-sysv-generator(8)
Process: 4512 ExecStart=/etc/init.d/slapd start (code=exited, status=1/FAILURE)
Mai 22 10:38:49 dc slapd[4512]: Starting ldap server(s): slapd …failed.
Mai 22 10:38:49 dc slapschema[4527]: No trusted audiences configured
Mai 22 10:38:49 dc slapschema[4527]: oauthbearer_client_plug_init() failed in sasl_server_add_plugin(): error when parsing configuration file
Mai 22 10:38:49 dc slapschema[4527]: _sasl_plugin_load failed on sasl_server_plug_init for plugin: oauthbearer
Mai 22 10:38:49 dc slapschema[4527]: Loaded metadata from “/usr/share/univention-management-console/saml/idp/ucs-sso.pahl.intranet.xml”
Mai 22 10:38:49 dc slapschema[4527]: DIGEST-MD5 common mech free
Mai 22 10:38:49 dc slapd[4512]: .
Mai 22 10:38:49 dc systemd[1]: slapd.service: Control process exited, code=exited, status=1/FAILURE
Mai 22 10:38:49 dc systemd[1]: slapd.service: Failed with result ‘exit-code’.
Mai 22 10:38:49 dc systemd[1]: Failed to start LSB: OpenLDAP standalone server (Lightweight Directory Access Protocol).

Anyone any hinds, just got medicated with bloodpresure lower, dont want to take more of that :wink:

2

When i run

slapd -h “ldapi:/// ldap://:7389/ ldaps://:7636/” -d 64

It ends in …

Blockquote
TLS: could not read DH parameters file `/etc/ldap/dh_2048.pem’.
TLS: error:0909006C:PEM routines:get_name:no start line …/crypto/pem/pem_lib.c:745
682ee3f1 main: TLS init def ctx failed: -1
682ee3f1 slapd stopped.
682ee3f1 connections_destroy: nothing to destroy.
root@dc:~#

Blockquote
root@dc:~# ls -la /etc/ldap/
insgesamt 68
drwxr-xr-x 5 root root 4096 Mai 22 10:21 .
drwxr-xr-x 118 root root 20480 Mai 22 10:02 …
-rw-r–r-- 1 root root 0 Mai 22 04:30 dh_2048.pem
-rw-r–r-- 1 root root 689 Sep 30 2024 ldap.conf
-rw-r–r-- 1 root root 332 Mai 21 2022 ldap.conf.debian
-rw-r–r-- 1 root root 0 Sep 30 2024 rootpw.conf
drwxr-xr-x 2 root root 4096 Mai 22 10:32 sasl2
drwxr-xr-x 2 root root 4096 Aug 18 2024 schema
-rw-r----- 1 root root 24492 Mai 22 10:21 slapd.conf
drwxr-xr-x 3 openldap openldap 4096 Nov 30 2022 slapd.d

Its empty …

3

Ok, i fixed my problem.

Thanks to all, sometimes you have to explain the problem to anyone to get it.

SOLUTION:

Let Univention recreate the DH File:

sh -x /usr/share/univention-ldap/create-dh-parameter-files