[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: n-way multi master and mirror mode

To: Brendan Kearney <bpk678@gmail.com>, Quanah Gibson-Mount <quanah@symas.com>
Subject: Re: n-way multi master and mirror mode
From: Howard Chu <hyc@symas.com>
Date: Sun, 4 Dec 2016 23:03:59 +0000
Cc: openldap-technical@openldap.org
In-reply-to: <WM!5f5d102b007af36fcae4a668334d40f8e5d88c8d4daef207c6248dfdea66c40bfde870048e697051b7242d9ff2aebf4d!@mailstronghold-3.zmailcloud.com>
References: <9d839f32-e456-045e-5372-b05b5510ba70@gmail.com> <4C4BC30AC646B3691A58116E@192.168.1.19> <CAARxGtj8b5bzkOtt8qQoCPh=Fyg5P+-JeVHvaEuRZyL==7+0jw@mail.gmail.com> <WM!12a8ed0e309de7b2311d33b30faaea8f0a7b1a603dad91c89f1716a98669134c72d098acb08ece8e9d7c8a9cb6f12f16!@mailstronghold-2.zmailcloud.com> <1B9342D9B4824860A82C5925@[192.168.1.19]> <b6790b82-f015-d3da-5300-e0e199be59a7@gmail.com> <WM!44ad0e380ee67a02e4d0d4461439cc67c76d8850ce4465b0ca5ddbc5fcadc3b8041b42450072f69bdcfa1c35f171a153!@mailstronghold-1.zmailcloud.com> <47F43B713E14E9A5BD0AB6A9@[192.168.1.19]> <877c954c-3401-f9aa-8514-952e479855a3@gmail.com> <WM!8ad33a3cebfb1ae8218218b749f12190e18affb1b3d313884200e48fc74ef069d99352210ba9f2953bf6dc27960f3a6c!@mailstronghold-2.zmailcloud.com> <016FB40EC174599EEEFBA31C@[192.168.1.19]> <01ae8347-99e8-a6ac-725e-97efd327e875@gmail.com> <WM!5f5d102b007af36fcae4a668334d40f8e5d88c8d4daef207c6248dfdea66c40bfde870048e697051b7242d9ff2aebf4d!@mailstronghold-3.zmailcloud.com>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:49.0) Gecko/20100101 Firefox/49.0 SeaMonkey/2.46a2

Brendan Kearney wrote:

On 12/04/2016 04:49 PM, Quanah Gibson-Mount wrote:

Again, Mirror Mode is a concept, not a setting.  The setting you refer to,
is, as I previously noted, misnamed.  Either your servers are configured to
do multimaster replication, or they aren't.

Mirrormode - the concept - is irrelevant here. All of the official docs showthe mirrormode setting being used in N-Way multimaster.

yes, i seem to be in the trap about the mirror mode misnomer. though
ambiguous, your statements indicate that mirror mode the setting is required
for n-way multi master replication.


That is what the Admin Guide already says.


i agree most of my traffic is reads.  i have 7 examples of connections with
deferred operations.  they are all SRCH's (i.e. reads).  I seem to misrember
the source of the deferred connections.  bind-dyndb-ldap does not show in my
logs.  sssd access is what 6 of 7 examples show.  below is one sample.

This is just due to sssd being very poorly written. It spews out a bunch ofLDAP requests without waiting for replies. It then abandons N-1 of therequests as soon as it reads the first reply. And then it reissues theremaining requests, over and over. Instead it should just wait a little longerfor all the replies, instead of abandoning and resubmitting the same requestsand wasting redundant work.

You're better off using nslcd or nssov, since they actually implement LDAPqueries in a competent fashion.

ReceivedAt    FromHost    SysLogTag    Message
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 fd=29 ACCEPT from
IP=192.168.88.4:59233 (IP=192.168.88.1:389)
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=0 SRCH base=""
scope=0 deref=0 filter="(objectClass=*)"
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=0 SRCH attr=*
altServer namingContexts supportedControl supportedExtension supportedFeatures
supportedLDAPVersion supportedSASLMechanisms domainControllerFunctionality
defaultNamingContext lastUSN highestCommittedUSN
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=0 SEARCH RESULT
tag=101 err=0 nentries=1 text=
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=1 BIND dn=""
method=163
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=1 RESULT tag=97
err=14 text=SASL(0): successful result:
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=2 BIND dn=""
method=163
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=2 RESULT tag=97
err=14 text=SASL(0): successful result:
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=3 BIND dn=""
method=163
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=3 BIND
authcid="host/hypervisor.bpk2.com@BPK2.COM"
authzid="host/hypervisor.bpk2.com@BPK2.COM"
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=3 BIND
dn="cn=hypervisor,ou=computers,dc=bpk2,dc=com" mech=GSSAPI sasl_ssf=56 ssf=56
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=3 RESULT tag=97
err=0 text=
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=4 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=4 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=8 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=8 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=9 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=9 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=10 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=10 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=6 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=6 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=7 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=7 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=5 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=5 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:00 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:00 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:00 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:00 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:00 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:00 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=11 ABANDON msg=5
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=12 ABANDON msg=6
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=13 ABANDON msg=7
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=14 ABANDON msg=8
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=15 ABANDON msg=9
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=16 ABANDON msg=10
12/04/16 04:00 PM    server1    slapd[5033]:     conn=2434 op=17 ABANDON msg=11
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=19 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=18 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=18 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=19 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=20 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=20 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=21 ABANDON msg=19
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=22 ABANDON msg=20
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=23 ABANDON msg=21
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=24 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=24 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=26 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=26 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=27 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=27 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=25 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=25 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=28 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:03 PM    server1    slapd[5033]:     conn=2434 op=28 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:03 PM    server1    slapd[5033]:     connection_input: conn=2434
deferring operation: too many executing
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=29 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=29 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=30 ABANDON msg=25
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=31 ABANDON msg=26
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=32 ABANDON msg=27
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=33 ABANDON msg=28
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=34 ABANDON msg=29
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=35 ABANDON msg=30
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=36 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=36 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:04 PM    server1    slapd[5033]:     conn=2434 op=37 ABANDON msg=37
12/04/16 04:07 PM    server1    slapd[5033]:     conn=2434 op=38 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:07 PM    server1    slapd[5033]:     conn=2434 op=38 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:07 PM    server1    slapd[5033]:     conn=2434 op=39 ABANDON msg=39
12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=40 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=41 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=41 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=40 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=42 SRCH
base="ou=SUDO Groups,ou=Roles,dc=bpk2,dc=com" scope=2 deref=0
filter="(&(objectClass=sudoRole)(modifyTimestamp>=20150104230653Z)(!(modifyTimestamp=20150104230653Z)))"

12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=42 SRCH
attr=objectClass cn sudoCommand sudoHost sudoUser sudoOption sudoRunAs
sudoRunAsUser sudoRunAsGroup sudoNotBefore sudoNotAfter sudoOrder modifyTimestamp
12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=43 ABANDON msg=41
12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=44 ABANDON msg=42
12/04/16 04:12 PM    server1    slapd[5033]:     conn=2434 op=45 ABANDON msg=43
12/04/16 04:15 PM    server1    slapd[5033]:     conn=2434 op=46 UNBIND
12/04/16 04:15 PM    server1    slapd[5033]:     conn=2434 fd=29 closed



--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

References:
- n-way multi master and mirror mode
  - From: Brendan Kearney <bpk678@gmail.com>
- Re: n-way multi master and mirror mode
  - From: brendan kearney <bpk678@gmail.com>
- Re: n-way multi master and mirror mode
  - From: Quanah Gibson-Mount <quanah@symas.com>
- Re: n-way multi master and mirror mode
  - From: Brendan Kearney <bpk678@gmail.com>
- Re: n-way multi master and mirror mode
  - From: Quanah Gibson-Mount <quanah@symas.com>
- Re: n-way multi master and mirror mode
  - From: Brendan Kearney <bpk678@gmail.com>
- Re: n-way multi master and mirror mode
  - From: Quanah Gibson-Mount <quanah@symas.com>
- Re: n-way multi master and mirror mode
  - From: Brendan Kearney <bpk678@gmail.com>

Prev by Date: Re: n-way multi master and mirror mode
Next by Date: Re: n-way multi master and mirror mode
Index(es):
- Chronological
- Thread