--On Tuesday, December 20, 2011 12:54 PM -0800 Quanah Gibson-Mount
<[email protected]> wrote:
--On Tuesday, December 20, 2011 8:39 PM +0000 "Torsten Schlabach (Tascel
eG)" <[email protected]> wrote:
We're using OpenLDAP 2.4.23 on Debian Linux. The backend is a back-hdb.
Upgrade.
A more complete answer (other than you really do need to upgrade, and for
sanity, rebuild the OpenLDAP you have against OpenSSL), is that you have
syncprov checkpointing on. So the CSN is only updated in the underlying DB
based off the period of time you specified to the overlay. Thus when slapd
is running, ldapsearch is always going to give you the correct answer.
slapcat may or may not. If you stop slapd, slapcat will.
From the manual page:
syncprov-checkpoint <ops> <minutes>
After a write operation has succeeded, write the contextCSN to the
underlying database if <ops> write operations or more than <minutes> time
have passed since the last checkpoint. Checkpointing is disabled by
default.
--Quanah
--
Quanah Gibson-Mount
Sr. Member of Technical Staff
Zimbra, Inc
A Division of VMware, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration