Re: Accesslog purge doesn't work in Openldap 2.4.21

Re: Accesslog purge doesn't work in Openldap 2.4.21 - Ubuntu Lucid

To: openldap-technical@openldap.org

Subject: Re: Accesslog purge doesn't work in Openldap 2.4.21 - Ubuntu Lucid

From: Miguel Montero Rodríguez <migmonte@gmail.com>

Date: Thu, 5 Jul 2012 19:01:27 +0200

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; bh=pAPpjH//vJCA52G/rEYkZWTBPnH9lvf3QuM4GNZ+0AY=; b=XZklfbz/JfM/KGV1QfCkh9zYSURtcDpOLK1BM2YjX0mDt5PMWHsc3Bx7uldN7DE2hP 9LZWMj4lZG3RpngLwYclQAZuONVWXsu6E273GAgA8v0xyiM+cBwpXMF2pLkyf/Q/hJd0 lMLl24jQlzBcMXC+tp6Tb9AEb3clPrtbWNhvSKkHACO5CO828NKWh/ad303S2/hiZeFl NKsWEMB2RbInVzRnDzcIWpUgGy7fU2UtbdIR20nauH6mpSJjQARBtJhQdibVa0ILfOmp +AZYEXc7eOWFeo3sEBnVxLFDDr/RlbJOBAtE0+OCMYepEzGoUgl+zgJou4uKaW3EFxNE MXzw==

In-reply-to: <4FF460D9.9000900@bofh.ca>

References: <CAAp2orXdwYDyPTAsBOpQS1metZGdt9oac_41iLLNwMSVjLz1JQ@mail.gmail.com> <4FF460D9.9000900@bofh.ca>

Hi,

To be honest, I'm not a guru in Openldap, I didn't know that BerkeleyDB could be running with OpenLDAP. So, thank you very much, you have opened my mind.

I set the flag DB_LOG_AUTOREMOVE in DB_CONFIG file, first I've stopped ldap (/etc/init.d/slapd stop), then I've changed the file DB_CONFIG, and then I've restarted slapd again. After doing this I've restarted even the server but the log.* files are still there :(

I've been searching what package should I install in the server in order to have the db_archive, db_checkpoint... utilities and I find that I could install the BerkeleyDB but not an isolated package for Ubuntu Server 10.10 LTS...

Seriously, thank you VERY much.

On Wed, Jul 4, 2012 at 5:27 PM, Brandon Hume <hume-ol@bofh.ca> wrote:

On 07/ 4/12 07:05 AM, Miguel Montero Rodríguez wrote:

I've just seen that /var/lib/ldap/accesslog is growing so I've realized that olcAccessLogPurge is not working properly (for example, I have log.0000000001 file from 2011-09-10).

I believe you're confusing the accesslog purge with BerkeleyDB's internal bookkeeping. olcAccessLogPurge will configure slapd cleaning out old LDAP entries which are used as the accesslog. But remember that OpenLDAP runs on *top* of BerkeleyDB, if you're using the BDB and/or the HDB backends. The log.* files in your data directory are there as part of BerkeleyDB, and OpenLDAP doesn't know about them.

You'll want to investigate the db_checkpoint and db_archive (specifically db_archive -a) commands, which will tell you which of those log.* files are old and unused and can be removed. You might also be interested in the DB_LOG_AUTOREMOVE flag in DB_CONFIG.

If you're running a modern release (and, really, if you participate in this list that's not optional...) you can also investigate using mdb as the backend, which does away with those files altogether.