OpenLdap mirrormode cluster with 2 slaves.

[Jan Hugo Prins <jhp@jhprins.org>]

Hello,

I have the following setup that gives me some issues at the moment.
I have 2 servers running Fedora 10 with OpenLDAP 2.4.19 that are running
in Mirrormode.
The sync between those 2 servers works just fine.

Besides that we have 2 frontend servers that rely heavily on ldap for
mail delivery and mail transfers. To make this workable we thought about
creating a readonly replica on these servers and tell the sendmail to
use the local ldap as primary. When we had an old version on these
servers (I think 2.4.12) everything worked fine. We now upgraded all
servers to 2.4.19 and the configuration moved to slapd.d format, and now
it looks like those 2 servers don't see the updates on the mirrormode
backend anymore.

I have to following config's, this was from before the migration to slapd.d:

==================
master 1
==================

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
serverID 3
#
# Configure a replication consumer
#
syncrepl   rid=1
                provider=ldap://server2:389
                type=refreshAndPersist
                retry="60 10 300 +"
                interval=00:00:05:00
                searchbase="dc=domain,dc=com"
                filter="(objectClass=*)"
                attrs="*"
                scope=sub
                schemachecking=off
                bindmethod=simple
                binddn="cn=syncrepl,dc=domain,dc=com"
                credentials=password

mirrormode on


==================
master 2
==================

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
serverID 4
#
# Configure a replication consumer
#
syncrepl   rid=1
                provider=ldap://server1:389
                type=refreshAndPersist
                retry="60 10 300 +"
                interval=00:00:05:00
                searchbase="dc=domain,dc=com"
                filter="(objectClass=*)"
                attrs="*"
                scope=sub
                schemachecking=off
                bindmethod=simple
                binddn="cn=syncrepl,dc=domain,dc=com"
                credentials=password

mirrormode on

===================
slaves
===================

overlay syncprov
syncprov-checkpoint 100 10
#
# Configure a replication consumer
#
syncrepl   rid=1
                provider=ldap://ldap:389
                type=refreshOnly
                retry="60 1 120 1"
                interval=00:00:05:00
                searchbase="dc=domain,dc=com"
                filter="(objectClass=*)"
                attrs="*"
                scope=sub
                schemachecking=off
                bindmethod=simple
                binddn="cn=syncrepl,dc=domain,dc=com"
                credentials=password

updateref       ldap://ldap.svc.be.nl:389
updateref       ldap://ldap.lan.domain.com:389

============================================

When I empty the DIT on a slave and start it again it gets the full DIT
just fine and I checked this. But after that it is not updated anymore.

Does anyone see here some obvious things I'm missing in these slave or
master configs?

Thanks a lot,
Jan Hugo Prins