Hi,

I just upgraded our servers from Debian 11 to 12. I'm not sure if this is an upstream change, but slapd 2.5 on Debian 12 doesn't support the HDB and BDB backends, so the database needs to be migrated to LMDB. Unfortunately I neglected to check the backend in use for all instances. Our main slapd instance already used LMDB, but another instance, that's just getting a copy of that database through sync replication, was still using HDB. At first I only noticed an error during upgrade. I found a guide (https://sources.debian.org/src/openldap/2.5.13%2Bdfsg-5/debian/slapd.README.Debian/ line 255 following) to do the upgrade to 2.5.x if it fails, which showed me the error.

   lt_dlopenext failed: (back_hdb) file not foundslapadd: could not add
   entry dn="cn=module{0},cn=config" (line=16): <olcModuleLoad> handler
   exited with 1
   Closing DB...


So I followed the setps under "BDB/HDB backends removed: migrating to LMDB backend". But upon trying to restore the backup again, it just told me

   slapadd: could not add entry dn="cn=config" (line=1):
   Closing DB...

The first set of lines in cn\=config.ldif reads

   dn: cn=config
   objectClass: olcGlobal
   cn: config
   olcArgsFile: /var/run/slapd/slapd.args
   olcLogLevel: none
   olcPidFile: /var/run/slapd/slapd.pid
   olcToolThreads: 1
   structuralObjectClass: olcGlobal
   entryUUID: 71b384b4-aca9-1032-883a-d9850217023f
   creatorsName: cn=config
   createTimestamp: 20130908080726Z
   entryCSN: 20130908080726.757296Z#000000#000#000000
   modifiersName: cn=config
   modifyTimestamp: 20130908080726Z

So I'm not sure what it wants to tell me now. I already checked against the config of the main instance, made a few modifications, but the error message is the same. Here the modifications:

   dn: cn=config
   objectClass: olcGlobal
   cn: config
   olcArgsFile: /var/run/slapd/slapd.args
   olcLogLevel: none
   olcPidFile: /var/run/slapd/slapd.pid
   olcToolThreads: 1
   structuralObjectClass: olcGlobal
   entryUUID: 71b384b4-aca9-1032-883a-d9850217023f
   creatorsName: cn=config
   createTimestamp: 20130908080726Z
   olcTLSCACertificateFile: /etc/ssl/certs/xyz-chain.pem
   olcTLSCertificateFile: /etc/ssl/certs/mail.domain.de.cert.pem
   olcTLSCertificateKeyFile: /etc/ssl/private/mail.domain.de.private.pem
   entryCSN: 20130908080726.757296Z#000000#000#000000
   modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=mail
   modifyTimestamp: 20130908080726Z

Could anybody tell me what exactly the problem is?

Richard

Reply via email to