Hello Sven,

Did you set ACL that allow reply to be send to client on the proxy ldap 
instance ? I had same issue with META proxy ldap type before I set these ACL. 

Brgds,
Jean-Luc. 

> On 7 Jun 2023, at 16:23, Sven Feyerabend 
> <sven.feyerab...@stuvus.uni-stuttgart.de> wrote:
> 
> Hello everyone,
> 
> I have set up two slapd instances in mirror mode.
> As described in the documentation I used another slapd instance with ldap 
> backend to proxy the requests and provide failover capabilities in case one 
> of the upstream servers becomes unavailable.
> 
> Now I have the curious situation, that the proxy correctly forwards the 
> search request from a client to the upstream server but doesn't return the 
> result.
> I can see in the log that the upstream server responds with one entry:
> 
> SEARCH RESULT tag=101 err=0 qtime=0.000034 etime=0.001134 nentries=1
> 
> The proxy however does not forward this result to the client:
> 
> SEARCH RESULT tag=101 err=0 qtime=0.000034 etime=0.001730 nentries=0
> 
> The client (ldapsearch for test purposes) then gives me the following result:
> 
> # search result
> search: 2
> result: 0 Success
> 
> I don't understand what I did wrong. I imported the correct schema into the 
> proxy instance, my config of the ldap backend on the proxy is as follows:
> 
> # {2}ldap, config
> dn: olcDatabase={2}ldap,cn=config
> objectClass: olcDatabaseConfig
> objectClass: olcLdapConfig
> olcDatabase: {2}ldap
> olcSuffix: ROOT_SUFFIX_OF_UPSTREAM_DIRECTORY
> olcDbURI: 
> ldap://openldap-test-0.ldap-test:1389,ldap://openldap-test-1.ldap-test:1389
> 
> Does anyone know how to solve this?
> 
> Some help would be appreciated greatly.
> 
> Thanks in advance and kind regards
> 
> Sven

Reply via email to