changes no longer replicated between the masters

[Kent Tong <kent@cpttm.org.mo>]

Hi,

I've set up two openldap servers (ldap1.cpttm and ldap2.cpttm)
for multi-master replication. It seems to work fine initially.
However, later on it seems the replication has stopped: I can
add new entries or change attribute values on ldap1.cpttm but
ldap2.cpttm won't see the changes.

I confirmed that they are talking to each other with both
tcpdump and syslog.

The configuration and the trace level log is attached below.
Any idea to further troubleshoot this issue? Thanks in advance
for any hint!

Both are running slapd 2.4.9-0ubuntu0.

Configuration
=============
dn: olcDatabase={1}hdb,cn=config
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=cpttm,dc=org,dc=mo
olcAccess: {0}to attrs=userPassword,shadowLastChange  by anonymous auth 
 by self write  by * none
olcAccess: {1}to dn.base=""  by * read
olcAccess: {2}to *  by * read
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=admin,dc=cpttm,dc=org,dc=mo
olcRootPW: {SSHA}<DELETED>
olcSyncrepl: {0}rid=003 provider=ldaps://ldap1.cpttm 
binddn="cn=admin,dc=cpttm,dc=org,dc=mo" bindmethod=simple 
credentials=<DELETED>
searchbase="dc=cpttm,dc=org,dc=mo" type=refreshOnly
interval=00:00:00:10 retry="5 5 300 5" timeout=1
olcSyncrepl: {1}rid=004 provider=ldaps://ldap2.cpttm 
binddn="cn=admin,dc=cpttm,dc=org,dc=mo" bindmethod=simple
credentials=<DELETED>
searchbase="dc=cpttm,dc=org,dc=mo" type=refreshOnly
interval=00:00:00:10 retry="5 5 300 5" timeout=1
olcMirrorMode: TRUE

syslog
======
Nov  4 12:42:55 hoadms004 slapd[20835]: =>do_syncrep2 rid=003
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_get(24): got
connid=13594
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_read(24): checking
for input on id=13594
Nov  4 12:42:55 hoadms004 slapd[20835]: conn=13594 op=1 do_search
Nov  4 12:42:55 hoadms004 slapd[20835]: >>> dnPrettyNormal: 
<dc=cpttm,dc=org,dc=mo>
Nov  4 12:42:55 hoadms004 slapd[20835]: <<< dnPrettyNormal: 
<dc=cpttm,dc=org,dc=mo>, <dc=cpttm,dc=org,dc=mo>
Nov  4 12:42:55 hoadms004 slapd[20835]: => get_ctrls
Nov  4 12:42:55 hoadms004 slapd[20835]: => get_ctrls:
oid="1.3.6.1.4.1.4203.1.9.1.1" (noncritical)
Nov  4 12:42:55 hoadms004 slapd[20835]: <= get_ctrls: n=1 rc=0 err=""
Nov  4 12:42:55 hoadms004 slapd[20835]: send_ldap_result: conn=13594
op=1 p=3
Nov  4 12:42:55 hoadms004 slapd[20835]: send_ldap_response: msgid=2
tag=101 err=0
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_get(24): got
connid=13594
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_read(24): checking
for input on id=13594
Nov  4 12:42:55 hoadms004 slapd[20835]: ber_get_next on fd 24 failed
errno=0 (Success)
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_closing: readying
conn=13594 sd=24 for close
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_close: deferring
conn=13594 sd=24
Nov  4 12:42:55 hoadms004 slapd[20835]: conn=13594 op=2 do_unbind
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_resched: attempting
closing conn=13594 sd=24
Nov  4 12:42:55 hoadms004 slapd[20835]: connection_close: conn=13594 sd=24

--
Kent Tong
Useful news for software developers at 
http://www2.cpttm.org.mo/cyberlab/softdev/newsletter