Re: LDAP authentication + replication

[Michael Ströder <michael@stroeder.com>]

Maxime Gaudreault wrote:
> 
> I configured my 2 tests server to replicate with syncrepl using this
> website:
> [..]
> It works well. If I create a new user on any servers it's immediately
> replicated to the other. However I have some error in the log files:
> 
> (these 2 messages appears every 10 seconds on the first server (vmlinux01))
> 
> Sep 22 11:53:56 vmlinux01 slapd[12072]: <= bdb_equality_candidates:
> (entryCSN) not indexed
> 
> Sep 22 11:53:56 vmlinux01 slapd[12072]: <= bdb_inequality_candidates:
> (entryCSN) not indexed

These are warnings (not errors) indicating what they say. An LDAP client is
searching for any unindexed attribute, here 'entryCSN' used with syncrepl. You
can add this index to increase performance.

How do I add an index after populating the database?
http://www.openldap.org/faq/data/cache/136.html

> Sep 22 11:24:51 vmlinux02 slapd[10596]: do_syncrep2: rid=001 (-1) Can't
> contact LDAP server
> 
> Sep 22 11:24:51 vmlinux02 slapd[10596]: do_syncrepl: rid=001 retrying (4
> retries left)

It seems your slave replica (temporarily?) could not connect to the master
replica.

Ciao, Michael.