[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: Entries in LDAP dir seem to sporadically become unreadable
On Thu, 28 Apr 2005, David Harrison wrote:
Hi all,
I'm using OpenLDAP ver 2.2.23-1 on Debian Linux as a means for providing PAM
authentication across multiple machines, as well as providing a central
repository of email addresses, aliases and mail lists for postfix.
This machine has been upgraded from our previously unproblematic version of
OpenLDAP, version 2.0.23-6.3.
What I'm finding is that sporadically our MTA (postfix) will not be able to
find a given entry in the directory, or that NS on one of the servers will
not be able to correctly resolve group or user id's. There doesn't seem to
be any rhyme or reason to the pattern of the occurence (and it's not overly
frequent, once a week or so at the moment), it just seems to happen. No
errors in the logs, no strange updates in the logs either.
[cut]
If I rename the existing entry to something else, create a new entry and give
it all the same details as the renamed entry and save it, everything goes
back to working again - so it doesn't seem like a configuration issue to me.
Even stranger is that once I have two entries that are identical but for name
(ie the old one and the new one) I see the following behaviour :
This (to search for the new entry) :
ldapsearch -x -b "ou=GroupEMail,dc=my,dc=domain,dc=com"
"(&(objectclass=MailGroup)(groupEMail=foo))
gets me a successful match, but the same query for the old entry (except of
course to change foo to foo-old) gets no successful matches.
[cut]
Don't know if this will help, but the symptom described sounds
like what I've seen occur when an index is added to a working
directory's configuration without running slapindex (or better:
slapcat, stop slapd, slapadd) afterward. Have you tried dumping
and reloading the directory?
--
Kirk Turner-Rustin | Programmer/Analyst
Ohio Wesleyan University | Libraries and Information Services
http://www.owu.edu | http://lis.owu.edu