OpenLDAP 2.4.16: LDAP entry deletions not propaged in certain syncrepl multimaster scenario

[Alvin Wong <Alvin.Wong@Calabrio.com>]

Hi

 

I've encounter a problem in OpenLDAP 2.4.16 on 2 LDAP servers system setup with syncrepl multimaster and all data are synchronized. If server A is down and LDAP entries (leaf or subtree) are deleted on server B, when server A comes up, those LDAP entries are not removed from server A by syncrepl. If LDAP operations are done on either servers while both are up, syncrepl correctly propagates them to the other server.

 

Below are the slapd.conf files for both server A and B. Is there something wrong with the way they are configured or is this a known issue?

 

Thanks in advance.

 

========= SERVER A SLAPD.CONF ==============

ucdata-path       "C:/Program Files/MyApp/database"

include              "C:/Program Files/MyApp/schemaconf/core.schema"

include              "C:/Program Files/MyApp/schemaconf/corba.schema"

include              "C:/Program Files/MyApp/schemaconf/cosine.schema"

include              "C:/Program Files/MyApp/schemaconf/inetorgperson.schema"

include              "C:/Program Files/MyApp/schemaconf/nis.schema"

include              "C:/Program Files/MyApp/schemaconf/spanlink.schema"

pidfile                "C:/Program Files/MyApp/bin/slapd.pid"

 

argsfile        "C:/Program Files/MyApp/bin/slapd.args"

idletimeout            300

sizelimit            unlimited

allow bind_v2

conn_max_pending_auth            2000

 

access to dn.subtree="ou=People,o=Spanlink Communications"

            by dn="cn=user,ou=People,o=Spanlink Communications" read

            by * read

access to *

            by dn="cn=user,ou=People,o=Spanlink Communications" write

            by dn="cn=replication1,ou=People,o=Spanlink Communications" write

            by dn="cn=replication2,ou=People,o=Spanlink Communications" write

            by * read

 

#######################################################################

# BDB database definitions

#######################################################################

database           bdb

suffix                 "o=Spanlink Communications"

rootdn               "cn=super,ou=People,o=Spanlink Communications"

checkpoint        10 1

cachesize         50000

searchstack      8

rootpw               secret

directory            "C:/Program Files/MyApp/database"

 

# Indices to maintain

index    objectClass       eq

index    entryCSN          eq

 

# for sync repl

serverID 1

syncrepl rid=123

            searchbase="o=Spanlink Communications"

            provider=ldap://10.10.10.75:38983

            type=refreshAndPersist

            retry="5 5 300 +"

            schemachecking=on

            attrs=*

            bindmethod=simple

            binddn="cn=replication1,ou=People,o=Spanlink Communications"

            credentials=secret

 

mirrormode true

overlay syncprov

syncprov-checkpoint 100 1

 

 

========= SERVER B SLAPD.CONF ==============

ucdata-path       "C:/Program Files/MyApp/database"

include              "C:/Program Files/MyApp/schemaconf/core.schema"

include              "C:/Program Files/MyApp/schemaconf/corba.schema"

include              "C:/Program Files/MyApp/schemaconf/cosine.schema"

include              "C:/Program Files/MyApp/schemaconf/inetorgperson.schema"

include              "C:/Program Files/MyApp/schemaconf/nis.schema"

include              "C:/Program Files/MyApp/schemaconf/spanlink.schema"

pidfile                "C:/Program Files/MyApp/bin/slapd.pid"

 

argsfile        "C:/Program Files/MyApp/bin/slapd.args"

idletimeout            300

sizelimit            unlimited

allow bind_v2

conn_max_pending_auth            2000

 

access to dn.subtree="ou=People,o=Spanlink Communications"

            by dn="cn=user,ou=People,o=Spanlink Communications" read

            by * read

access to *

            by dn="cn=user,ou=People,o=Spanlink Communications" write

            by dn="cn=replication1,ou=People,o=Spanlink Communications" write

            by dn="cn=replication2,ou=People,o=Spanlink Communications" write

            by * read

 

#######################################################################

# BDB database definitions

#######################################################################

database           bdb

suffix                 "o=Spanlink Communications"

rootdn               "cn=super,ou=People,o=Spanlink Communications"

checkpoint        10 1

cachesize         50000

searchstack      8

rootpw               secret

directory            "C:/Program Files/MyApp/database"

 

# Indices to maintain

index    objectClass       eq

index    entryCSN          eq

 

# for sync repl

serverID 2

syncrepl rid=123

            searchbase="o=Spanlink Communications"

            provider=ldap://10.10.10.196:38983

            type=refreshAndPersist

            retry="5 5 300 +"

            schemachecking=on

            attrs=*

            bindmethod=simple

            binddn="cn=replication2,ou=People,o=Spanlink Communications"

            credentials=secret

 

mirrormode true

overlay syncprov

syncprov-checkpoint 100 1

 

ALVIN WONG
SENIOR SOFTWARE ENGINEER

DIRECT +1 (763).795.7752  
alvin.wong@calabrio.com
Download vCard File

Products    |     Partners    |    Contact Us

 

 

 

 

 

 

 

 

 

 

 

 

This message is confidential, and any unauthorized disclosure, use or dissemination (either whole or in part) is prohibited. If you are not the intended recipient of the message please notify the sender immediately and delete the message from your system.