Actually you might be running into a known bug which is fixed in 1.3.6
and up. Sorry 1.3.5/el7_3 is no longer supported or maintained.
Interesting! Can you link me to the bug?
> What does this tell you:
> [25/Oct/2017:18:16:43.389794105 +0000] connection - conn=167482 fd=121 Incoming BER
Element was 3 bytes, max allowable is 2097152 bytes. Change the nsslapd-maxbersize
attribute in cn=config to increase.
> This is confusing, it was 3 bytes which is < 2097152 and still the log message.
This happens when you try to open a ssl connection on the non-secure
port. We have a bug open on this to make that error message means
something useful (the message should be fixed in 1.3.7)
OK, so this is benign more or less?