The memory block, BLK_LDAP_POOL, is used for name lookups. Domino will report LDAP BPool Full messages when 0x8433 BLK_LDAP_POOL has reached maximum size 20MB.
The error LDAP BPool Full can occur in either of these configurations:
1. Domino using LDAP for authentication
LDAP BPool Full error will cause LDAP authentication to fail and a message like this may be reported: LDAP Server: Bind request for failed: Invalid credentials specified: failed to authenticate
2. Domino with Directory Assistance to remote LDAP Directory Server:
LDAP BPool Full error will impact look up to a remote LDAP directory configured through Directory Assistance. The Domino console may report Directory Assistance messages:
Unable to bind to LDAP Server
LDAP Server is NOT available.
Directory Assistance is reloading internal tables due to remote server failure.
A Domino Server restart will be required to reset memory for BLK_LDAP_POOL. Memory block, BLK_LDAP_POOL, is a shared memory pool and not part of LDAP private memory; therefore, simply restarting LDAP will not resolve the issue once it has reached the 20MB maximum size.
Troubleshooting LDAP BPool Full
Install IBM Support Assistant Lite for Lotus Notes/Domino to gather and submit diagnostic files to expedite data analysis.
Diagnostic files for LDAP BPool include console and NSD logs.
1. Console logging should be enabled to capture LDAP BPool error
CONSOLE_LOG_ENABLED=1
Notes.ini parameter generates log file in \IBM_TECHNICAL_SUPPORT\console.log. A new console log is created each time server is restarted , by renaming existing console log to include a time/date stamp in the file name, for example: console____@__.log.
Server Console commands to generate log dynamically:
The commands "start consolelog" and "stop consolelog" will enable/disable output to the console log file. These commands are not sticky; they are in effect only for the current server session.
2. At the time of the error, LDAP BPool Full, run a manual NSD to capture count and block size for BLK_LDAP_POOL
B-g-- 0x8433 count= 1, size=20971522 BLK_LDAP_POOL
BP#1 used=20871680, npools=20/20, TotalSize=20971522 Cap 99%
1/20 size=1048576, h=0xf023d799 [ 1: 4154408]
2/20 size=1048576, h=0xf024154e [ 28: 4963544]
3/20 size=1048576, h=0xf024100d [ 67: 1015600]
4/20 size=1048576, h=0xf0240d10 [ 69: 1015600]
5/20 size=1048576, h=0xf0243c88 [ 70: 1015600]
6/20 size=1048576, h=0xf0244ae8 [ 71:16760720]
7/20 size=1048578, h=0xf02428ae [ 73: 8023008]
8/20 size=1048576, h=0xf0244bd6 [ 73: 6974408]
9/20 size=1048576, h=0xf0244b2b [ 73: 5925808]
10/20 size=1048576, h=0xf0248368 [ 73: 4877208]
11/20 size=1048576, h=0xf0246ae7 [ 73: 3828608]
12/20 size=1048576, h=0xf0248bc4 [ 73: 2780008]
13/20 size=1048576, h=0xf0240453 [ 73:11956688]
14/20 size=1048576, h=0xf02434b1 [ 73:10287096]
15/20 size=1048576, h=0xf02404b2 [ 73:14911024]
16/20 size=1048576, h=0xf0242e04 [ 73:16793520]
17/20 size=1048576, h=0xf0243713 [ 74:32505840]
18/20 size=1048576, h=0xf0248852 [ 74:17330872]
19/20 size=1048576, h=0xf023eee5 [ 74: 9602528]
20/20 size=1048576, h=0xf0249341 [ 74:24619352]
Recommendations
- Review validity of LDAP queries coming to Domino LDAP or search filters in Directory Assistance for remote LDAP directory server
- Run the latest version of Domino which addresses known memory leaks for BLK_LDAP_POOL
Related Documents
Server Console Error LDAP BPool and LDAP connections drop (Technote #1381690)
HTTP crashes during LDAP NAMElookup (Technote #1242882)
LDAP pool information written to console when a Domino server starts (Technote #1254114)
What is dynamic DEBUG_OUTFILE in Domino? (Technote #1085072 )
Console_Log_Enabled (Notes/Domino wiki)
Fixed APARs / SPRs
Fix for memory leak duplicate object class (APAR LO59043: SPR# XCXC8EJ4JA fixed in Domino 8.5.2 FP3 and 8.5.3)
Fix a memory leak on retrying access to LDAP Directory fixed in Domino 8.5.1 (APAR LO48925: SPR # CMCY7SVQJU)
LDAP BPool Full. Leak when error from remote LDAP server fixed in Domino 7.0.4 FP and 8.5.1 (APAR LO41691: SPR # AJMO7AXLXE)
Fixed a LDAP bpool leak when using attribute aliases in search criteria fixed in Domino 7.0.4, 8.0.2, and 8.5 (APAR LO23247: SPR # MERS6X4KFU)
Potential memory leak when LDAPvalue_standardize returns NULL fixed in Domino 7.0.4, 8.0.2, and 8.5 (APAR LO27198: SPR# SSHD7BURZL)