--On October 2, 2007 10:20:45 PM +0000 quanah(a)zimbra.com wrote:
>> This has nothing to do with BDB so db_stat isn't relevant here. It's
>> about the accesslog overlay and any other overlays that may be
>> manipulating the callback stack, so your slapd.conf is more relevant
>> here.
>
Here's the slapd.conf (comments stripped):
include "/opt/zimbra/openldap/etc/openldap/schema/core.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/cosine.schema"
include
"/opt/zimbra/openldap/etc/openldap/schema/inetorgperson.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/amavisd.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/zimbra.schema"
include "/opt/zimbra/lib/conf/zimbra-ext.schema"
pidfile "/opt/zimbra/openldap/var/run/slapd.pid"
argsfile "/opt/zimbra/openldap/var/run/slapd.args"
TLSCertificateFile /opt/zimbra/conf/slapd.crt
TLSCertificateKeyFile /opt/zimbra/conf/slapd.key
TLSVerifyClient never
access to dn.base="" by * read
access to dn.base="cn=Subschema" by * read
access to dn.subtree="cn=zimbra"
by dn.children="cn=admins,cn=zimbra" write
access to
attrs=zimbraZimletUserProperties,zimbraGalLdapBindPassword,zimbraGalLdapBindDn,zimbraAuthTokenKey,zimbraPreAuthKey,zimbraPasswordHistory,zimbraIsAdminAccount,zimbraAuthLdapSearchBindPassword
by dn.children="cn=admins,cn=zimbra" write
by * none
access to attrs=userPassword
by anonymous auth
by dn.children="cn=admins,cn=zimbra" write
access to filter=(!(zimbraHideInGal=TRUE))
attrs=cn,co,company,dc,displayName,givenName,gn,initials,l,mail,o,objectclass,ou,physicalDeliveryOfficeName,postalCode,sn,st,street,streetAddress,telephoneNumb
er,title,uid
by dn.children="cn=admins,cn=zimbra" write
by * read
access to
attrs=zimbraId,zimbraMailAddress,zimbraMailAlias,zimbraMailCanonicalAddress,zimbraMailCatchAllAddress,zimbraMailCatchAllCanonicalAddress,zimbraMailCatchAllForwardingAddress,zimbraMailDeliveryA
ddress,zimbraMailForwardingAddress,zimbraPrefMailForwardingAddress,zimbraMailHost,zimbraMailStatus,zimbraMailTransport,zimbraDomainName,zimbraDomainType,zimbraPrefMailLocalDeliveryDisabled
by dn.children="cn=admins,cn=zimbra" write
by * read
access to attrs=entry
by dn.children="cn=admins,cn=zimbra" write
by * read
database config
rootpw {SSHA}XXXX
database monitor
rootdn "cn=config"
access to dn.children="cn=monitor"
by dn.exact="uid=zimbra,cn=admins,cn=zimbra" read
database bdb
suffix cn=accesslog
directory /opt/zimbra/openldap-data/accesslog/db
rootdn cn=accesslog
index default eq
index entryCSN
index objectClass
index reqEnd
index reqResult
index reqStart
access to dn.subtree="cn=accesslog"
by dn.exact="uid=zimbra,cn=admins,cn=zimbra" read
dbconfig set_cachesize 0 629145600 1
dbconfig set_lg_regionmax 262144
dbconfig set_lg_bsize 2097152
dbconfig set_lg_dir /opt/zimbra/openldap-data/accesslog/logs
dbconfig set_flags DB_LOG_AUTOREMOVE
checkpoint 1024 5
timelimit unlimited
sizelimit unlimited
overlay syncprov
syncprov-nopresent TRUE
syncprov-reloadhint TRUE
database bdb
suffix ""
rootdn "uid=zimbra,cn=admins,cn=zimbra"
rootpw {SSHA}XXXXXXX
cachesize 300000
checkpoint 64 5
loglevel 256
threads 16
idlcachesize 300000
directory "/opt/zimbra/openldap-data"
index objectClass eq
index zimbraForeignPrincipal eq
index zimbraId eq
index zimbraVirtualHostname eq
index zimbraMailCatchAllAddress eq,sub
index zimbraMailDeliveryAddress eq,sub
index zimbraMailForwardingAddress eq
index zimbraMailAlias eq,sub
index zimbraDomainName eq,sub
index zimbraShareInfo sub
index uid pres,eq
index mail pres,eq,sub
index cn pres,eq,sub
index displayName pres,eq,sub
index sn pres,eq,sub
index gn pres,eq,sub
index zimbraCalResSite eq,sub
index zimbraCalResBuilding eq,sub
index zimbraCalResFloor eq,sub
index zimbraCalResRoom eq,sub
index zimbraCalResCapacity eq
index entryUUID eq
index entryCSN eq
sizelimit unlimited
timelimit unlimited
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 500
overlay accesslog
logdb cn=accesslog
logops writes
logsuccess TRUE
logpurge 04+00:00 01+00:00
--Quanah
--
Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration