> On 14 Jan 2016, at 08:37 , BÖSCH Christian <[email protected]> wrote: > >>> >>> hi, >>> >>> i have two openldap servers 2.4.43 on freebsd 10.2 with multimaster >>> replication. >>> if i add on one node a dynamicobject, the other node dies immediatly. >>> has anybody an idea? >>> >>> regards,chris >>> >>> --- >>> >>> added this: >>> dn: uid=vkw-guest,ou=people,o=abc.net <http://abc.net/> >>> sn: VKW Guest >>> objectClass: organizationalPerson >>> objectClass: person >>> objectClass: dynamicObject >>> objectClass: inetLocalMailRecipient >>> objectClass: inetOrgPerson >>> objectClass: top >>> uid: vkw-guest >>> cn: VKW Guest >>> >>> >>> the log says: >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: activity on 1 descriptor >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: activity on: >>> Jan 13 13:08:40 openldap2 slapd[75017]: 30r >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: read activity on 30 >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=6 >>> active_threads=0 tvp=zero >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=7 >>> active_threads=0 tvp=zero >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=8 >>> active_threads=0 tvp=zero >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=9 >>> active_threads=0 tvp=zero >>> Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=10 >>> active_threads=0 tvp=zero >>> Jan 13 13:08:40 openldap2 slapd[75017]: connection_get(30) >>> Jan 13 13:08:40 openldap2 slapd[75017]: connection_get(30): got connid=0 >>> Jan 13 13:08:40 openldap2 slapd[75017]: =>do_syncrepl rid=021 >>> Jan 13 13:08:40 openldap2 slapd[75017]: =>do_syncrep2 rid=021 >>> Jan 13 13:08:40 openldap2 slapd[75017]: do_syncrep2: rid=021 >>> cookie=rid=021,sid=001,csn=20160113120840.025550Z#000000#001#000000 >>> Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_message_to_entry: rid=021 >>> DN: uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>, UUID: >>> 2074bc1e-4e3a-1035-92a1-ed72d2e7074a >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPrettyNormal: >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPrettyNormal: >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>, >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=admin,o=xyz.net >>> <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=admin,o=xyz.net >>> <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: >>> <cn=admin,o=xyz.net <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: >>> <cn=admin,o=xyz.net <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=admin,o=xyz.net >>> <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=admin,o=xyz.net >>> <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: >>> <cn=admin,o=xyz.net <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: >>> <cn=admin,o=xyz.net <http://xyz.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=Subschema> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=Subschema> >>> Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: <cn=Subschema> >>> Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: <cn=subschema> >>> Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 >>> LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_search >>> Jan 13 13:08:40 openldap2 slapd[75017]: mdb_dn2entry("o=abc.net >>> <http://abc.net/>") >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_dn2id("o=abc.net >>> <http://abc.net/>") >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_dn2id: got id=0x1 >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_decode: >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_decode >>> Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: search access to >>> "o=abc.net <http://abc.net/>" "entry" requested >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= root access granted >>> Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: search access >>> granted by manage(=mwrscxd) >>> Jan 13 13:08:40 openldap2 slapd[75017]: search_candidates: base="o=abc.net >>> <http://abc.net/>" (0x00000001) scope=2 >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_filter_candidates >>> Jan 13 13:08:40 openldap2 slapd[75017]: EQUALITY >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_equality_candidates >>> (entryUUID) >>> Jan 13 13:08:40 openldap2 slapd[75017]: => key_read >>> Jan 13 13:08:40 openldap2 slapd[75017]: mdb_idl_fetch_key: [5ec43656] >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_index_read: failed (-30798) >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_equality_candidates: id=0, >>> first=0, last=0 >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_filter_candidates: id=0 >>> first=0 last=0 >>> Jan 13 13:08:40 openldap2 slapd[75017]: mdb_search_candidates: id=0 first=0 >>> last=0 >>> Jan 13 13:08:40 openldap2 slapd[75017]: mdb_search: no candidates >>> Jan 13 13:08:40 openldap2 slapd[75017]: send_ldap_result: conn=-1 op=0 p=0 >>> Jan 13 13:08:40 openldap2 slapd[75017]: send_ldap_result: err=0 matched="" >>> text="" >>> Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 be_search >>> (0) >>> Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 >>> uid=vkw-guest,ou=people,o=abc.net <http://abc.net/> >>> Jan 13 13:08:40 openldap2 slapd[75017]: slap_queue_csn: queueing >>> 0x846348780 20160113120840.025550Z#000000#001#000000 >>> Jan 13 13:08:40 openldap2 slapd[75017]: ==> unique_add >>> <uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>> >>> Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: manage access to >>> "uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>" "entry" requested >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= root access granted >>> Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: manage access >>> granted by manage(=mwrscxd) >>> Jan 13 13:08:40 openldap2 slapd[75017]: unique_add: administrative bypass, >>> skipping >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: ndn: >>> "ou=people,o=abc.net <http://abc.net/>" >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: oc: >>> "dynamicObject", at: "(null)" >>> Jan 13 13:08:40 openldap2 slapd[75017]: mdb_dn2entry("ou=people,o=abc.net >>> <http://abc.net/>") >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_dn2id("ou=people,o=abc.net >>> <http://abc.net/>") >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_dn2id: got id=0x3 >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_decode: >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_decode >>> Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: found entry: >>> "ou=people,o=abc.net <http://abc.net/>" >>> Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_get: failed to find >>> objectClass dynamicObject >>> Jan 13 13:08:40 openldap2 slapd[75017]: mdb_entry_get: rc=16 >> >> >> I suggest reading the above line where it clearly notes it has no knowledge >> of the dynamicObject objectClass. Looks like a failure to have consistent >> schema between nodes?
ok quanah, as you always mention to read the manuals carefully is quite a good
idea…
The quick and dirty solution is to set schemacheck=off in the syncrepl
configuration and, optionally, exclude the operational attributes from
replication, using
syncrepl ...
exattrs=entryTtl,entryExpireTimestamp
thank you anyway!
chris
>>
>> --Quanah
smime.p7s
Description: S/MIME cryptographic signature
