Sync Repl - mirror mode - rid=001 LDAP_RES_INTERMEDIATE - REFRESH_DELETE

["Sterling Sahaydak" <sterling.sahaydak@pi-coral.com>]

I've upgraded my 2 ldap servers to 2.4.39 and have been trying to get mirror mode to work with no luck.

I've removed out for now TLS and using ldap:///

 

The issue I've had since 2.4.23 version and now is "LDAP_RES_INTERMEDIATE - REFRESH_DELETE"

Everything else works but have run into this issue that can't resolve.

I've looked up in the forum for other references to this, but not seeing a clear resolution.

Others, keep getting additional messages beyond this, but mine stops at this.

I've tried running also with slapd -h "ldapi:/// ldap:///" -d 7 but getting stuck as well

 

Your help is greatly appreciated!

 

[root@ldap-east ~]# slapd -d sync
54243242 @(#) $OpenLDAP: slapd 2.4.39 (Sep 17 2014 15:14:19) $
        root@admin.xxxxx.net:/root/rpmbuild/BUILD/openldap-2.4.39/openldap-2.4.39/servers/slapd
54243242 /etc/openldap/slapd.conf: line 226: rootdn is always granted unlimited privileges.
54243242 slapd starting
54243242 do_syncrep2: rid=001 LDAP_RES_INTERMEDIATE - REFRESH_DELETE

 

Provider/Master side - slapd.conf  (ldap-east)

-------------------------------------------

include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/sudo.schema

 

allow bind_v2

 

pidfile         /var/run/openldap/slapd.pid
argsfile        /var/run/openldap/slapd.args

 

modulepath /usr/lib/openldap
modulepath /usr/lib64/openldap

 

moduleload accesslog.la
moduleload rwm.la
moduleload syncprov.la

 

disallow bind_anon

 

moduleload     back_bdb
moduleload     back_ldap

 

backend        bdb

 

database monitor
access to *
        by dn.exact="cn=Manager,dc=xxxxx,dc=net" read
        by * none

 

database        bdb
suffix          "dc=xxxxx,dc=net"
checkpoint      1024 15
rootdn          "cn=Manager,dc=xxxxx,dc=net"
rootpw          xxxxx

 

directory       /var/lib/ldap

 

access to *
        by dn.base="cn=TestSync,ou=Roles,dc=xxxxx,dc=net" write
        by * break

 

access to attrs=userPassword,shadowLastChange
        by dn="cn=Manager,dc=xxxxx,dc=net" write
        by anonymous auth
        by self write
        by * none

 

index objectClass                       eq,pres
index ou,cn,mail,surname,givenname      eq,pres,sub
index uidNumber,gidNumber,loginShell    eq,pres
index uid,memberUid                     eq,pres,sub
index nisMapName,nisMapEntry            eq,pres,sub
index entryCSN,entryUUID                eq

 

serverID 1
overlay syncprov

 

syncprov-checkpoint 100 1

 

syncprov-sessionlog 100

 

#LDAP Sync - Slave
syncrepl      rid=001
        provider=ldap://ldap-west.xxxxx.net
        bindmethod=simple
        binddn="cn=TestSync,ou=Roles,dc=xxxxx,dc=net"
        credentials="xxxxxx"
        searchbase="dc=xxxxx,dc=net"
        schemachecking=off
        type=refreshAndPersist
        retry="60 +"
        filter="(objectclass=*)"
        attrs="*,+"
mirrormode on

 

loglevel -1

 

 

 

Consumer/Slave side - slapd.conf (ldap-west) - only difference is the replication section

-------------------------------------------

....

serverID 2
overlay syncprov

 

syncprov-checkpoint 100 1

 

syncprov-sessionlog 100

 

#LDAP Sync - Master
syncrepl      rid=001
        provider=ldap://ldap-east.xxxxx.net
        bindmethod=simple
        binddn="cn=TestSync,ou=Roles,dc=xxxxx,dc=net"
        credentials="xxxxxx"
        searchbase="dc=xxxxx,dc=net"
        schemachecking=off
        type=refreshAndPersist
        retry="60 +"
        filter="(objectclass=*)"
        attrs="*,+"
mirrormode on