openldap-bugs

openldap-bugs@openldap.org

1 participants
20967 discussions

AW: WG: AW: (ITS#7426) contraints blocks syncreplication
by Sascha.Kuehndel＠deka.de 01 Nov '12

01 Nov '12

Hi, in real it is a multi-master-replication. So the constraints have to define on both sides. I have check the entry, more than one time. (many more) so i really sure, it is valid. (changed the attribute to another value and back on the procurer) I think it is a tricky timing problem, and it appears only in special situations. I found it, in a restore of a system with an backup. After imported it in the procurer1, I started the second one. At the next morning the sync wasn't complete. And I wondered why. Another test shows the problem, a little bit more. I changed the order of the entries in the initial.ldif (groups in front of users), and the sync works. In the last message, was a little type. In the database only 6 entries (not 56) Sascha PS: sorry my English is not very well

1 0

Re: WG: AW: (ITS#7426) contraints blocks syncreplication
by quanah＠zimbra.com 01 Nov '12

01 Nov '12

--On Thursday, November 01, 2012 3:03 PM +0000 Sascha.Kuehndel(a)deka.de wrote: > --_002_F12A906A1F17554CB9CDFC8F4779F3C469A7704B2BEXCCREX9dekag_ > Content-Type: text/plain; charset="iso-8859-1" > Content-Transfer-Encoding: quoted-printable > > Hi Howard, > > Sorry for the much "!" > > I have written a new config, only with constraint and replication. > I have reduce the database to 56 entries. > > In this configuration I can reproduce this error. > > my steps. > 1. F1> slapadd -f slapd.conf -f initial.ldif 2. F1> slapd -h > ldap://0.0.0.0= :4001 -f slapd.conf 3. F1> slapd -h ldap://0.0.0.0:4002 > -f slapd.conf Your message isn't particularly clear on what it is you are doing now. As Howard noted, it is only valid to have slapo-constraint on the provider, and not on any of the replicas. Using slapadd does not necessarily guarantee that your entry is valid, as slapadd can bypass some overlay checks. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#7427) Bogus entries with syncrepl/MMR
by hyc＠OpenLDAP.org 01 Nov '12

01 Nov '12

Full_Name: Howard Chu Version: 2.4.33 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (37.19.96.255) Submitted by: hyc Related to ITS#7052 and #7162. We still see cases where some entries that were deleted on a master are resurrected on a consumer. This happens when a single consumer is talking to a pair of masters which are mirroring each other, and the consumer gets an old batch of updates from one master, duplicating updates it already received from the other master. The spurious Adds are being accepted because they were sent with no cookie CSN. These ops are embedded in a string of other old ops, which have cookie CSNs that are correctly being ignored. The fix is to set a flag to remember when we've seen an old op, and unset the flag when we're caught up. Then, for any ops that are received without a cookie CSN, if the flag is set, this means we're in the middle of a stream of old ops, and this op should be ignored.

1 0

WG: AW: (ITS#7426) contraints blocks syncreplication
by Sascha.Kuehndel＠deka.de 01 Nov '12

01 Nov '12

--_002_F12A906A1F17554CB9CDFC8F4779F3C469A7704B2BEXCCREX9dekag_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hi Howard, Sorry for the much "!" I have written a new config, only with constraint and replication. I have reduce the database to 56 entries. In this configuration I can reproduce this error. my steps. 1. F1> slapadd -f slapd.conf -f initial.ldif 2. F1> slapd -h ldap://0.0.0.0= :4001 -f slapd.conf 3. F1> slapd -h ldap://0.0.0.0:4002 -f slapd.conf In the log of F2, the sync stops with the first user. And this moment the r= oot-entry and ou=3Dusers is synced, only. I hope you can reproduce the error, too. Sascha PS: tested with 2.4.32 have the problem, too. --_002_F12A906A1F17554CB9CDFC8F4779F3C469A7704B2BEXCCREX9dekag_ Content-Type: application/x-tar; name="ITS_7426.tar" Content-Description: ITS_7426.tar Content-Disposition: attachment; filename="ITS_7426.tar"; size=10240; creation-date="Thu, 01 Nov 2012 14:56:56 GMT"; modification-date="Thu, 01 Nov 2012 14:55:43 GMT" Content-Transfer-Encoding: base64 RjEvc2xhcGQuY29uZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwMDA2NDQAMDAwMDYw NQAwMDAwMDAxADAwMDAwMDAyNDM1ADEyMDQ0NTAzNzA2ADAwMTQxMTUAMAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1c3RhcgAwMHNfc2xhcGQAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAb3RoZXIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMDAwMDAwADAwMDAw MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj IFNjaGVtYXRhIGF1cyBkZXIgT3BlbkxEQVAtRGlzdHJpYnV0aW9uCmluY2x1ZGUJICAgICAgICAg ICAgICAgICBzbGFwZC9ldGMvb3BlbmxkYXAvc2NoZW1hL2NvcmUuc2NoZW1hCmluY2x1ZGUJICAg ICAgICAgICAgICAgICBzbGFwZC9ldGMvb3BlbmxkYXAvc2NoZW1hL2Nvc2luZS5zY2hlbWEKCiMg TG9hZCBtb2R1bGVzCm1vZHVsZXBhdGggICAgICAgICAgICAgICBzbGFwZC9saWJleGVjL29wZW5s ZGFwCm1vZHVsZWxvYWQgICAgICAgICAgICAgICBiYWNrX2hkYi5sYQptb2R1bGVsb2FkICAgICAg ICAgICAgICAgY29uc3RyYWludC5sYQptb2R1bGVsb2FkICAgICAgICAgICAgICAgc3luY3Byb3Yu bGEKCiMgQmFzZSBrb25maWd1cmF0aW9uCnBpZGZpbGUgICAgICAgICAgICAgICAgICBzbGFwZC5w aWQKYXJnc2ZpbGUgICAgICAgICAgICAgICAgIHNsYXBkLmFyZ3MKCiMgRGF0YWJhc2UKZGF0YWJh c2UgICAgICAgICAgICAgICAgIGhkYgoKc3VmZml4ICAgICAgICAgICAgICAgICAgICJvdT1kZWth LGRjPWV4YW1wbGUsZGM9Y29tIgpkaXJlY3RvcnkgICAgICAgICAgICAgICAgZXhhbXBsZQpyb290 ZG4gICAgICAgICAgICAgICAgICAgImNuPXJvb3Qsb3U9ZGVrYSxkYz1leGFtcGxlLGRjPWNvbSIK cm9vdHB3ICAgICAgICAgICAgICAgICAgIHJvb3QKCm92ZXJsYXkgY29uc3RyYWludApjb25zdHJh aW50X2F0dHJpYnV0ZSBhc3NvY2lhdGVkTmFtZSB1cmkKICBsZGFwOi8vL291PWdyb3VwLG91PWRl a2EsZGM9ZXhhbXBsZSxkYz1jb20/ZW50cnlETj9vbmU/KG9iamVjdENsYXNzPWFjY291bnQpCiAg cmVzdHJpY3Q9bGRhcDovLy9vdT11c2VyLG91PWRla2EsZGM9ZXhhbXBsZSxkYz1jb20/P29uZQoK CmluZGV4ICAgICAgICAgICAgICAgICAgICBlbnRyeUNTTiBlcQppbmRleCAgICAgICAgICAgICAg ICAgICAgZW50cnlVVUlEIGVxCgpvdmVybGF5IHN5bmNwcm92CnN5bmNwcm92LWNoZWNrcG9pbnQg ICAgICAxMDAgNQpzeW5jcHJvdi1zZXNzaW9ubG9nICAgICAgMTAwCnN5bmNwcm92LXJlbG9hZGhp bnQgICAgICBUUlVFCnN5bmNyZXBsCiAgICByaWQ9MDAxCiAgICBwcm92aWRlcj1sZGFwOi8vbG9j YWxob3N0OjQwMDIKICAgIGNyZWRlbnRpYWxzPXJvb3QKICAgIGJpbmRkbj0iY249cm9vdCxvdT1k ZWthLGRjPWV4YW1wbGUsZGM9Y29tIgogICAgYmluZG1ldGhvZD1zaW1wbGUKICAgIHNlYXJjaGJh c2U9Im91PWRla2EsZGM9ZXhhbXBsZSxkYz1jb20iCiAgICBzY2hlbWFjaGVja2luZz1vbgogICAg dHlwZT1yZWZyZXNoQW5kUGVyc2lzdAogICAgcmV0cnk9IjMwICsiCm1pcnJvcm1vZGUgb24KAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGMS9p bml0aWFsLmxkaWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAwMDY0NAAwMDAwNjA1ADAw MDAwMDEAMDAwMDAwMDI3MjIAMTIwNDQ1MDM0NjEAMDAxNDQzMQAwAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHVzdGFyADAwc19zbGFwZAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAABvdGhlcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwMDAwMDAAMDAwMDAwMAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGRuOiBv dT1kZWthLGRjPWV4YW1wbGUsZGM9Y29tCm91OiBkZWthbmV0Cm9iamVjdENsYXNzOiBvcmdhbml6 YXRpb25hbFVuaXQKc3RydWN0dXJhbE9iamVjdENsYXNzOiBvcmdhbml6YXRpb25hbFVuaXQKZW50 cnlVVUlEOiA3YjlkZDlkMi1iMGJjLTEwMzEtOWYyNS0wNTliZWIwYmI1M2MKZW50cnlDU046IDIw MTIxMDIyMTc0ODUwLjgxMDQ2N1ojMDAwMDAwIzAwMCMwMDAwMDAKCmRuOiBvdT11c2VyLG91PWRl a2EsZGM9ZXhhbXBsZSxkYz1jb20Kb3U6IEJlbnV0emVyCm9iamVjdENsYXNzOiBvcmdhbml6YXRp b25hbFVuaXQKc3RydWN0dXJhbE9iamVjdENsYXNzOiBvcmdhbml6YXRpb25hbFVuaXQKZW50cnlV VUlEOiA4YWQ4Y2ExMC1iMGJjLTEwMzEtOWYzYS0wNTliZWIwYmI1M2MKZW50cnlDU046IDIwMTIx MDIyMTc0OTE2LjM2MjU1NVojMDAwMDAwIzAwMCMwMDAwMDAKCmRuOiBkYz0xLG91PXVzZXIsb3U9 ZGVrYSxkYz1leGFtcGxlLGRjPWNvbQpkYzogMQpvYmplY3RDbGFzczogZG9tYWluCm9iamVjdENs YXNzOiB0b3AKYXNzb2NpYXRlZE5hbWU6IHVpZD0xNCxvdT1ncm91cCxvdT1kZWthLGRjPWV4YW1w bGUsZGM9Y29tCnN0cnVjdHVyYWxPYmplY3RDbGFzczogZG9tYWluCmVudHJ5VVVJRDogNzg4MGQw ZTYtYjBjMi0xMDMxLTg5NWItYTFhM2YyZmJhY2I3CmVudHJ5Q1NOOiAyMDEyMTAyMjE4MzE0Mi41 NjcyNzlaIzAwMDAwMCMwMDAjMDAwMDAwCgpkbjogZGM9MixvdT11c2VyLG91PWRla2EsZGM9ZXhh bXBsZSxkYz1jb20KZGM6IDIKb2JqZWN0Q2xhc3M6IGRvbWFpbgpvYmplY3RDbGFzczogdG9wCmFz c29jaWF0ZWROYW1lOiB1aWQ9MTQsb3U9Z3JvdXAsb3U9ZGVrYSxkYz1leGFtcGxlLGRjPWNvbQpz dHJ1Y3R1cmFsT2JqZWN0Q2xhc3M6IGRvbWFpbgplbnRyeVVVSUQ6IDgwNDE1MjU2LWIwYzItMTAz MS04OTVjLWExYTNmMmZiYWNiNwplbnRyeUNTTjogMjAxMjEwMjIxODMxNTUuNTczMDU4WiMwMDAw MDAjMDAwIzAwMDAwMAoKZG46IG91PWdyb3VwLG91PWRla2EsZGM9ZXhhbXBsZSxkYz1jb20Kb3U6 IFppZWxncnVwcGVuCmRlc2NyaXB0aW9uOiBDb250YWluZXIgZnVlciBaaWVsZ3J1cHBlbmVpbnRy YWVnZQpvYmplY3RDbGFzczogb3JnYW5pemF0aW9uYWxVbml0CnN0cnVjdHVyYWxPYmplY3RDbGFz czogb3JnYW5pemF0aW9uYWxVbml0CmVudHJ5VVVJRDogODQwNTExMTItYjBiYy0xMDMxLTlmMjYt MDU5YmViMGJiNTNjCmVudHJ5Q1NOOiAyMDEyMTAyMjE3NDkwNC45MDg2NjBaIzAwMDAwMCMwMDAj MDAwMDAwCgpkbjogdWlkPTE0LG91PWdyb3VwLG91PWRla2EsZGM9ZXhhbXBsZSxkYz1jb20KdWlk OiAxNApvYmplY3RDbGFzczogYWNjb3VudApvYmplY3RDbGFzczogdG9wCnN0cnVjdHVyYWxPYmpl Y3RDbGFzczogYWNjb3VudAplbnRyeVVVSUQ6IDg0N2VhYzVjLWIwYmMtMTAzMS05ZjM2LTA1OWJl YjBiYjUzYwplbnRyeUNTTjogMjAxMjEwMjIxNzUxMjcuNzIyNzQ3WiMwMDAwMDAjMDAwIzAwMDAw MAoKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEYyL3NsYXBk LmNvbmYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMDAwNjQ0ADAwMDA2MDUAMDAwMDAw MQAwMDAwMDAwMjQzNQAxMjA0NDUwNDI2MAAwMDE0MTEyADAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAdXN0YXIAMDBzX3NsYXBkAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAG90aGVyAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDAwMDAwMAAwMDAwMDAwAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIyBTY2hlbWF0 YSBhdXMgZGVyIE9wZW5MREFQLURpc3RyaWJ1dGlvbgppbmNsdWRlCSAgICAgICAgICAgICAgICAg c2xhcGQvZXRjL29wZW5sZGFwL3NjaGVtYS9jb3JlLnNjaGVtYQppbmNsdWRlCSAgICAgICAgICAg ICAgICAgc2xhcGQvZXRjL29wZW5sZGFwL3NjaGVtYS9jb3NpbmUuc2NoZW1hCgojIExvYWQgbW9k dWxlcwptb2R1bGVwYXRoICAgICAgICAgICAgICAgc2xhcGQvbGliZXhlYy9vcGVubGRhcAptb2R1 bGVsb2FkICAgICAgICAgICAgICAgYmFja19oZGIubGEKbW9kdWxlbG9hZCAgICAgICAgICAgICAg IGNvbnN0cmFpbnQubGEKbW9kdWxlbG9hZCAgICAgICAgICAgICAgIHN5bmNwcm92LmxhCgojIEJh c2Uga29uZmlndXJhdGlvbgpwaWRmaWxlICAgICAgICAgICAgICAgICAgc2xhcGQucGlkCmFyZ3Nm aWxlICAgICAgICAgICAgICAgICBzbGFwZC5hcmdzCgojIERhdGFiYXNlCmRhdGFiYXNlICAgICAg ICAgICAgICAgICBoZGIKCnN1ZmZpeCAgICAgICAgICAgICAgICAgICAib3U9ZGVrYSxkYz1leGFt cGxlLGRjPWNvbSIKZGlyZWN0b3J5ICAgICAgICAgICAgICAgIGV4YW1wbGUKcm9vdGRuICAgICAg ICAgICAgICAgICAgICJjbj1yb290LG91PWRla2EsZGM9ZXhhbXBsZSxkYz1jb20iCnJvb3RwdyAg ICAgICAgICAgICAgICAgICByb290CgpvdmVybGF5IGNvbnN0cmFpbnQKY29uc3RyYWludF9hdHRy aWJ1dGUgYXNzb2NpYXRlZE5hbWUgdXJpCiAgbGRhcDovLy9vdT1ncm91cCxvdT1kZWthLGRjPWV4 YW1wbGUsZGM9Y29tP2VudHJ5RE4/b25lPyhvYmplY3RDbGFzcz1hY2NvdW50KQogIHJlc3RyaWN0 PWxkYXA6Ly8vb3U9dXNlcixvdT1kZWthLGRjPWV4YW1wbGUsZGM9Y29tPz9vbmUKCgppbmRleCAg ICAgICAgICAgICAgICAgICAgZW50cnlDU04gZXEKaW5kZXggICAgICAgICAgICAgICAgICAgIGVu dHJ5VVVJRCBlcQoKb3ZlcmxheSBzeW5jcHJvdgpzeW5jcHJvdi1jaGVja3BvaW50ICAgICAgMTAw IDUKc3luY3Byb3Ytc2Vzc2lvbmxvZyAgICAgIDEwMApzeW5jcHJvdi1yZWxvYWRoaW50ICAgICAg VFJVRQpzeW5jcmVwbAogICAgcmlkPTAwMQogICAgcHJvdmlkZXI9bGRhcDovL2xvY2FsaG9zdDo0 MDAxCiAgICBjcmVkZW50aWFscz1yb290CiAgICBiaW5kZG49ImNuPXJvb3Qsb3U9ZGVrYSxkYz1l eGFtcGxlLGRjPWNvbSIKICAgIGJpbmRtZXRob2Q9c2ltcGxlCiAgICBzZWFyY2hiYXNlPSJvdT1k ZWthLGRjPWV4YW1wbGUsZGM9Y29tIgogICAgc2NoZW1hY2hlY2tpbmc9b24KICAgIHR5cGU9cmVm cmVzaEFuZFBlcnNpc3QKICAgIHJldHJ5PSIzMCArIgptaXJyb3Jtb2RlIG9uCgAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA== --_002_F12A906A1F17554CB9CDFC8F4779F3C469A7704B2BEXCCREX9dekag_--

1 0

AW: AW: (ITS#7426) contraints blocks syncreplication
by Sascha.Kuehndel＠deka.de 01 Nov '12

01 Nov '12

> Yes, but that's irrelevant. Even if the groups were fully replicated already I have tested the user entry on provider (with constraints active) the entry is accepted! So the entry is valid! Sascha

1 0

Re: AW: (ITS#7426) contraints blocks syncreplication
by hyc＠symas.com 01 Nov '12

01 Nov '12

Sascha.Kuehndel(a)deka.de wrote: > Hi, > > the problem is the order of the sync process. > First the users are sync. At this moment the consumer don't have any group entry. > So the constraints checks the dekanetZielgruppenDN against a not existing subtree. > The result is: the user entry is not added. Yes, but that's irrelevant. Even if the groups were fully replicated already, if the provider sent an invalid user, this constraint overlay on the consumer would correctly reject it and replication would still break. The config is nonsensical. Closing this ITS. -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

AW: (ITS#7426) contraints blocks syncreplication
by Sascha.Kuehndel＠deka.de 01 Nov '12

01 Nov '12

Hi, the problem is the order of the sync process. First the users are sync. At this moment the consumer don't have any group entry. So the constraints checks the dekanetZielgruppenDN against a not existing subtree. The result is: the user entry is not added. Sascha

1 0

Re: (ITS#7426) contraints blocks syncreplication
by hyc＠symas.com 01 Nov '12

01 Nov '12

sascha.kuehndel(a)deka.de wrote: > Full_Name: Sascha Kuehndel > Version: 2.4.33 + ITS#7418 > OS: HP-UX 11.31 > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (192.166.104.102) > > > Hallo, > > the constraints seams to block the sync-replication. > > constraint_attribute dekanetZielgruppenDN uri > ldap:///ou=Zielgruppen,ou=dekanet,dc=dekager,dc=dekabank,dc=extern?entryDN?one?(objectClass=dekanetZielgruppe) > restrict=ldap:///ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern??one Seems this is an improper config. If you already have constraints enforced on the provider, then only valid entries may be replicated, so constraints on the consumer are superfluous. > the replication syncs the users in ou=Benutzer first, and later the groups of > ou=Zielgruppen. > The be_add of the user failed in the consumer, until commenting out the > constraint. > > here the relevant part of the log file > 50c84eff syncrepl_message_to_entry: rid=002 DN: > uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern, UUID: XXX-UUID > 50c84eff syncrepl_entry: rid=002 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) > 50c84eff syncrepl_entry: rid=002 inserted UUID XXX-UUID > 50c84eff syncrepl_entry: rid=002 be_search (0) > 50c84eff syncrepl_entry: rid=002 > uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern > 50c84f00 slap_queue_csn: queing 6000000000a1d9c0 > 20120926141541.717811Z#000000#002#000000 > 50c84f00 slap_graduate_commit_csn: removing 6000000012baa390 > 20120926141541.717811Z#000000#002#000000 > 50c84f00 null_callback : error code 0x13 > 50c84f00 syncrepl_entry: rid=002 be_add > uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern (19) > 50c84f00 syncrepl_entry: rid=002 be_add > uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern failed (19) > 50c84f00 do_syncrepl: rid=002 rc 19 retrying > > > Greets, > Sascha > > -- -- Howard Chu CTO, Symas Corp. http://www.symas.com Director, Highland Sun http://highlandsun.com/hyc/ Chief Architect, OpenLDAP http://www.openldap.org/project/

1 0

(ITS#7426) contraints blocks syncreplication
by sascha.kuehndel＠deka.de 01 Nov '12

01 Nov '12

Full_Name: Sascha Kuehndel Version: 2.4.33 + ITS#7418 OS: HP-UX 11.31 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (192.166.104.102) Hallo, the constraints seams to block the sync-replication. constraint_attribute dekanetZielgruppenDN uri ldap:///ou=Zielgruppen,ou=dekanet,dc=dekager,dc=dekabank,dc=extern?entryDN?one?(objectClass=dekanetZielgruppe) restrict=ldap:///ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern??one the replication syncs the users in ou=Benutzer first, and later the groups of ou=Zielgruppen. The be_add of the user failed in the consumer, until commenting out the constraint. here the relevant part of the log file 50c84eff syncrepl_message_to_entry: rid=002 DN: uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern, UUID: XXX-UUID 50c84eff syncrepl_entry: rid=002 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) 50c84eff syncrepl_entry: rid=002 inserted UUID XXX-UUID 50c84eff syncrepl_entry: rid=002 be_search (0) 50c84eff syncrepl_entry: rid=002 uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern 50c84f00 slap_queue_csn: queing 6000000000a1d9c0 20120926141541.717811Z#000000#002#000000 50c84f00 slap_graduate_commit_csn: removing 6000000012baa390 20120926141541.717811Z#000000#002#000000 50c84f00 null_callback : error code 0x13 50c84f00 syncrepl_entry: rid=002 be_add uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern (19) 50c84f00 syncrepl_entry: rid=002 be_add uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern failed (19) 50c84f00 do_syncrepl: rid=002 rc 19 retrying Greets, Sascha

1 0

Re: (ITS#7389) [PATCH] MozNSS: load certificates from certdb, fallback to PEM
by jvcelak＠redhat.com 31 Oct '12

31 Oct '12

I'm sorry, there is an updated version of the patch: ftp://ftp.openldap.org/incoming/jvcelak-20121031-update-moznss-load-certs-f… The attached file is derived from OpenLDAP Software. All of the modifications to OpenLDAP Software represented in the following patch(es) were developed by Red Hat. Red Hat has not assigned rights and/or interest in this work to any party. I, Jan Vcelak am authorized by Red Hat, my employer, to release this work under the following terms. Red Hat hereby place the following modifications to OpenLDAP Software (and only these modifications) into the public domain. Hence, these modifications may be freely used and/or redistributed for any purpose with or without attribution and/or other notice.

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs