Re: Replication restores deleted user

[Quanah Gibson-Mount <quanah@zimbra.com>]

--On Friday, October 31, 2014 4:13 PM -0400 kevin sullivan 
<kevin4sullivan@gmail.com> wrote:

> Quanah,
>
> Thank you for the suggestion to move to delta-syncrepl MMR.
> Unfortunately, I am having problems setting this up properly. After
> reading through some documentation, I thought it would be simple but when
> I bring up slapd on my two servers, they both start using around 100% CPU
> and in the debug output the two servers are constantly looping through
> all of the objects in my DIT and saying that the objects have not changed:
>
> 5453d6b5 @(#) $OpenLDAP: slapd 2.4.39 (Jun 18 2014 05:19:18) $
>        
> mockbuild@x86-028.build.eng.bos.redhat.com:/builddir/build/BUILD/openldap
> -2.4.39/openldap-2.4.39/build-servers/servers/slapd
> 5453d6b5 hdb_monitor_db_open: monitoring disabled; configure monitor
> database to enable
> 5453d6b5 slapd starting
> ...
> 5453d6b5 syncrepl_message_to_entry: rid=001 DN: dc=example,dc=com, UUID:
> 1cfcd560-f564-1033-9f47-b521eabdb6ad
> 5453d6b5 syncrepl_entry: rid=001 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD)
> 5453d6b5 syncrepl_entry: rid=001 inserted UUID
> 1cfcd560-f564-1033-9f47-b521eabdb6ad
> 5453d6b5 dn_callback : entries have identical CSN dc=example,dc=com
> 20141031161001.910968Z#000000#000#000000
> 5453d6b5 syncrepl_entry: rid=001 be_search (0)
> 5453d6b5 syncrepl_entry: rid=001 dc=example,dc=com
> 5453d6b5 syncrepl_entry: rid=001 entry unchanged, ignored
> (dc=example,dc=com)
> 5453d6b5 syncrepl_message_to_entry: rid=001 DN:
> ou=users,dc=example,dc=com, UUID: 1cfe8cf2-f564-1033-9f48-b521eabdb6ad
> 5453d6b5 syncrepl_entry: rid=001 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD)
> 5453d6b5 syncrepl_entry: rid=001 inserted UUID
> 1cfe8cf2-f564-1033-9f48-b521eabdb6ad
> 5453d6b5 dn_callback : entries have identical CSN
> ou=users,dc=example,dc=com 20141031161001.922234Z#000000#000#000000
> 5453d6b5 syncrepl_entry: rid=001 be_search (0)
> 5453d6b5 syncrepl_entry: rid=001 ou=users,dc=example,dc=com
> 5453d6b5 syncrepl_entry: rid=001 entry unchanged, ignored
> (ou=users,dc=example,dc=com)
> .....
> 5453d6b5 do_syncrep2: rid=001 LDAP_RES_SEARCH_RESULT
> 5453d6b5 do_syncrep2: rid=001 cookie=
> ... Repeated forever ...
>
> Am I configuring something incorrectly?
>
> To refresh your memory, I am running 2.4.39-8. I have two servers
> (server1 and server2) that I want to setup in delta-syncrepl MMR
> MirrorMode.

Hi Kevin,

I stopped using the deprecated slapd.conf format years ago, as it's prone 
to misuse and incorrect setup.  Your supplied config is an example of why 
it's a bad idea to use slapd.conf (For example, you have serverID under the 
database section, when it's a global option, etc).  I'd strongly advise you 
to switch to using cn=config so that you can have an actual validated 
configuration.  It also makes troubleshooting a lot easier to do.

Aside from that, your log simply shows the server comparing each entry 
between the two servers... Sounds like they didn't start out believing they 
were in sync and are trying to get there.

Here's an example of my config, using cn=config (slapcat export) minus the 
schema:

<http://pastebin.com/nv1WNX2y>

--Quanah



--

Quanah Gibson-Mount
Server Architect
Zimbra, Inc.
--------------------
Zimbra ::  the leader in open source messaging and collaboration