Re: Syncrep problem or bug? (openldap 2.2.11)

["Jong-Hyuk" <jongchoi@OpenLDAP.org>]

The syncrepl replication performs entry-level replication, but not in
attribute level.
Both the master entry and the replica entry should start from the same
origin. (database dump of master)
- Jong-Hyuk

> Hello,
>
> I am trying to make a partial replica using syncrep. But
> it is replicating (and removing) data what it shouldn't.
>
> On the start:
>
> The master has:
>
> # david, usuarios, andagosoft.es
> dn: cn=david,ou=usuarios,dc=andagosoft,dc=es
> objectClass: top
> objectClass: posixAccount
> objectClass: person
> cn: david
> uid: david
> uidNumber: 1006
> gidNumber: 1006
> loginShell: /bin/bash
> gecos: gecos
> description: description
> homeDirectory: /home/david
> sn: david
>
> (config: sessionlog 100 100000)
>
> The slave has:
>
> # david, usuarios, andagosoft.es
> dn: cn=david,ou=usuarios,dc=andagosoft,dc=es
> objectClass: top
> objectClass: posixAccount
> objectClass: csicUsuario
> uid: david
> uidNumber: 1006
> gidNumber: 1006
> gecos: david
> loginShell: /bin/bash
> homeDirectory: /home/david
> csicUbicacion: a01b00c00
> csicDepartamento: a01b00
> cn: david
>
> (config: syncrepl rid=100
>         provider=ldap://master:389
>         type=refreshOnly
>         interval=00:00:00:30
>         searchbase="ou=usuarios,dc=andagosoft,dc=es"
>         attrs="gecos,description"
>         filter="(cn=david)"
>         scope=sub
>         schemachecking=off
>         updatedn="cn=admin,dc=andagosoft,dc=es"
>         bindmethod=simple
>         binddn="cn=admin,dc=andagosoft,dc=es"
>         credentials=secret
> )
>
> Then after of restart the servers, the slave has:
>
> # david, usuarios, andagosoft.es
> dn: cn=david,ou=usuarios,dc=andagosoft,dc=es
> uid: david
> uidNumber: 1006
> gidNumber: 1006
> loginShell: /bin/bash
> homeDirectory: /home/juan
> csicUbicacion: a01b00c00
> csicDepartamento: a01b00
> cn: david
> objectClass: top
> objectClass: posixAccount
> objectClass: person
> gecos: gecos
> description: description
>
> The questions are:
> why has it added objectClass=person?
> why has it remove objectClass=csicUsuario?
> shouldn't it only replica the attrs "gecos and description"?
>
> Thanks,
> Regards,
> Carlos.
>
> -- 
>  ___         _          \  |  /  Consulting
> | . |._ _  _| | ___  ___  ___    http://www.andago.com
> |   || ' |/ . |<_> |/ . |/ . \__ GNU/Linux
> |_|_||_|_|\___|<___|\_. |\___/     _ \  __|\ \  /
>  Carlos A. Lozano   <___'/ | \ -_) __/\__ \ >  <  -_)
>  [ carlos.lozano@andago.com ]\___|_|  ____/ _/\_\___|
>  [ calb@epsxe.com           ]  http://www.ePSXe.com
>
>