Re: Changing password with replicat and referal do nothing

[Quanah Gibson-Mount <quanah@zimbra.com>]

--On Monday, May 25, 2009 11:19 AM +0200 paulpierre.brun@free.fr wrote:

> Hi,
> I have :
> - a ldap referal server openldap-2.4.16 compile as ./configure —prefix=
> —enable-overlays —enable-ppolicy —enable-rwm —enable-bdb
> —enable-crypt. - a replicate openldap 2.3.27-8.el5_1.3,
>
> When I try to change a password for a customer,  for te referal i have in
> log file  May 25 10:52:38 ldap-v000 slapd[26539]: conn=0 fd=15 ACCEPT
> from IP=10.xxx.xx.xx:56813 (IP=0.0.0.0:389) May 25 10:52:38 ldap-v000
> slapd[26539]: connection_get(15)
> May 25 10:52:38 ldap-v000 slapd[26539]: connection_get(15): got connid=0
> May 25 10:52:38 ldap-v000 slapd[26539]: connection_read(15): checking for
> input on id=0 May 25 10:52:38 ldap-v000 slapd[26539]: daemon: activity on
> 1 descriptor May 25 10:52:38 ldap-v000 slapd[26539]: daemon: activity on:
>
> And referal do nothing else.

I see several potential issues here.

(a) OpenLDAP 2.3 support for being a 2.4 replica wasn't added until around 
OpenLDAP 2.3.40, so you can't even do what you're trying to do.

(b) It looks like you are trying to use slurpd replication from 2.4 to 2.3, 
which isn't going to work given that slurpd was removed from OpenLDAP 2.4.

(c) You're writing changes to the replica, which *correctly* returns a 
referral to the master.  If you don't want this to happen, set up 
slapo-chain to chain writes from the replica back up to the master.

--Quanah


--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration