Re: Shadow context when modifying syncrepl sections

[Yann Bordenave <yann.bordenave@smartjog.com>]

On 09/02, Pascal Fautrero wrote:
> Le 02/09/2013 13:57, Yann Bordenave a écrit :
> >http://www.openldap.org/doc/admin24/replication.html
> >https://github.com/benegon/openldap/blob/master/tests/scripts/test050-syncrepl-multimaster
> >
> >Actually, I followed this documentation step by step to setup the
> >multimaster system with my three nodes. I forgot to say that everything
> >is working, as long as I don't touch one of the olcSyncrepl attribute.
> >Here is an extract of the configuration:
> >
> >http://paste.meo.wf/paste/J4WsvLGK#EyzL7TLF
> >
> >Indeed, this extract is replicated on all the servers.
> >I tried to give only the relevant parts of the configuration.
> >Am I missing something ?
> >
> >I encounter the shadow context error only when I change one of the
> >olcSyncRepl attribute and I got it on every server, not only the one
> >where I make these changes.
> Well, your configuration seems to be the good one (but if I were
> you, I wouldn't use cn=admin,dc=example,dc=org to syncrepl your
> database {1}bdb.)
It is just for testing purposes, this is not going to be use as-is in
production, but thanks for pointing it out.

> - Did you try to modify other attributes in cn=config (by tcp, not
> ldapi) ? It works ?
Yes it works without problem, I'm using Luma to bind to cn=config with
the dn cn=admin,cn=config and I can modify everything.
I tried with ldapvi too, no problem encountered.

> - Can we see ACLs used on {0}config ? (by default,
> cn=admin,cn=config is not allowed to modify anything in TCP)
Seems odd, I didn't add any ACL on {0}config, I'm using the rootdn
account to test.

> - Did you try with mdb instead of bdb ?
Not at all. I will try too. 

> - What is your openldap version ?
You're pointing out something interesting: I have 2 servers with 2.4.23
from debian oldstable and one with 2.4.31 from stable.
I will unify the versions to see if my issue comes from that difference.

> 
> >I hope that these precisions will help in the investigations.
> >
> >>Regards,
> >>
> >Regards,
> >
> 

-- 
Yann Bordenave - Intern, R&E Infrastructure
Smartjog S.A.S. - http://www.smartjog.com - Groupe TDF
27 Bd Hippolyte Marques, 94200 Ivry sur Seine, France