- openldap-bugs - openldap.org

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by quanah＠zimbra.com 07 Feb '08

07 Feb '08

--On Thursday, February 07, 2008 4:56 PM +0000 quanah(a)zimbra.com wrote: > --On Thursday, February 07, 2008 2:11 AM +0000 orenl(a)cs.columbia.edu > wrote: > > >># TRY TO SOLVE ISSUES ? >> threads 32 >> idletimeout 30 > > > You are likely making your problem worse by increasing the number of > threads. I always advise a setting of "threads 8" in a high read, > low-to-medium write scenario. The more threads you have, the worse the > read rate, but the better the write rate. Or to be more precise, 4 threads per real core. I.e., a 2 CPU single core system, 8 threads. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by quanah＠zimbra.com 07 Feb '08

07 Feb '08

--On Thursday, February 07, 2008 2:11 AM +0000 orenl(a)cs.columbia.edu wrote: ># TRY TO SOLVE ISSUES ? > threads 32 > idletimeout 30 You are likely making your problem worse by increasing the number of threads. I always advise a setting of "threads 8" in a high read, low-to-medium write scenario. The more threads you have, the worse the read rate, but the better the write rate. > TLSCipherSuite HIGH:MEDIUM:LOW Did you add the patch for fixing TLSCipherSuite issues with GnuTLS (which is what Debian links OpenLDAP against)? Get rid of the separate "backend" directives, merge them all into the database area. Your cachesize setting for the BDB database also looks bizarrely small. Do you know the actual size of your database? Because right now, you are telling it to fit everything into 2MB of space. --Quanah -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

Re: (ITS#5356) Catching index ownership errors
by bgmilne＠staff.telkomsa.net 07 Feb '08

07 Feb '08

On Thursday 07 February 2008 08:22:12 rra(a)stanford.edu wrote: > One of the most common problems we see in Debian with people new to > OpenLDAP is that they run slapindex as root when they're running their > directory server as a non-root user and hence break the file ownership and > the database. Maybe your init script should die if the files and directories aren't writable by the user you run slapd as. There are more ways (than slapindex) to break file ownership.

1 0

Re: (ITS#5358) Modrdn operation with NOOP control crashes BDB backend
by rhafer＠suse.de 07 Feb '08

07 Feb '08

On Donnerstag, 7. Februar 2008, rhafer(a)suse.de wrote: > Full_Name: Ralf Haferkamp > Version: HEAD, RE23, RE24 > OS: > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (89.166.185.54) > > > This is basically the same issue as ITS#4925. The issue is also > apparent in the MODRDN operation: > > ldapmodrdn -x -h :389 -D <dn> -w <pw> -e \noop > ou=test,dc=my-domain,dc=com ou=test2 > > causes the server to crash. Fix is similar to the ITS#4925 fix. Fixed in HEAD. Will there be an additional RE23 release? If yes, this fix should go into it. -- Ralf

1 0

(ITS#5358) Modrdn operation with NOOP control crashes BDB backend
by rhafer＠suse.de 07 Feb '08

07 Feb '08

Full_Name: Ralf Haferkamp Version: HEAD, RE23, RE24 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (89.166.185.54) This is basically the same issue as ITS#4925. The issue is also apparent in the MODRDN operation: ldapmodrdn -x -h :389 -D <dn> -w <pw> -e \noop ou=test,dc=my-domain,dc=com ou=test2 causes the server to crash. Fix is similar to the ITS#4925 fix.

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by ando＠sys-net.it 07 Feb '08

07 Feb '08

h.b.furuseth(a)usit.uio.no wrote: > rra(a)stanford.edu writes: >> Specifically, the workaround is to compile the code with the upstream >> libtool instead of with Debian's libtool, since upstream libtool >> imports all module symbols into the global namespace. Debian's >> libtool has been modified to not do this because it causes all sorts >> of other problems in the general case, but not doing this breaks the >> meta backend because it wants to reference symbols from the bdb >> backend. > > s/bdb/ldap/. Sounds like a fix would be to build back-ldap statically > instead of dynamically on Debian if back-meta is built too. The reason back-meta uses code from back-ldap is that they share a lot of features. Probably, they could be moved into slapd, since they might be useful in other (proxy-related) future modules? That would be a lot of reworking, though. p. Ing. Pierangelo Masarati OpenLDAP Core Team SysNet s.r.l. via Dossi, 8 - 27100 Pavia - ITALIA http://www.sys-net.it --------------------------------------- Office: +39 02 23998309 Mobile: +39 333 4963172 Email: pierangelo.masarati(a)sys-net.it ---------------------------------------

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by h.b.furuseth＠usit.uio.no 07 Feb '08

07 Feb '08

rra(a)stanford.edu writes: > Specifically, the workaround is to compile the code with the upstream > libtool instead of with Debian's libtool, since upstream libtool > imports all module symbols into the global namespace. Debian's > libtool has been modified to not do this because it causes all sorts > of other problems in the general case, but not doing this breaks the > meta backend because it wants to reference symbols from the bdb > backend. s/bdb/ldap/. Sounds like a fix would be to build back-ldap statically instead of dynamically on Debian if back-meta is built too. -- Hallvard

1 0

Re: (ITS#5280) JLDAP waits for response for request which hasn't been sent because of connection shutdown
by Rastogi Arpit 06 Feb '08

06 Feb '08

hi Marcin, Me back from my vacation. How is the issue going on? Is there any progress made . Now I will be able to help you with the issue. This time it will be very helpful if you can tell me how you are using the sdk (the scenario) and code snippet of the code (if possible) and the purpose of using it . regards, Arpit

1 0

Re: (ITS#5280) JLDAP waits for response for request which hasn't been sent because of connection shutdown
by rarpit＠novell.com 06 Feb '08

06 Feb '08

--=__Part82A462B4.1__= Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable hi Marcin, Me back from my vacation. How is the issue going on? Is there any = progress made . Now I will be able to help you with the issue.=20 This time it will be very helpful if you can tell me how you are using the = sdk (the scenario) and code snippet of the code (if possible) and the = purpose of using it . =20 regards, Arpit=20 =20 --=__Part82A462B4.1__= Content-Type: text/html; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Content-Description: HTML <HTML><HEAD> <META http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-15= "> <META content=3D"MSHTML 6.00.2900.3199" name=3DGENERATOR></HEAD> <BODY style=3D"MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI"> <DIV>hi Marcin,</DIV> <DIV>    Me back from my vacation. How is the issue going = on? Is there any progress made . Now I will be able to help you with the = issue. <BR>This time it will be very helpful if you can tell me how you = are using the sdk (the scenario) and code snippet of the code (if = possible) and the purpose of using it .<BR> <BR>regards,<BR>Arpit = <BR> </DIV></BODY></HTML> --=__Part82A462B4.1__=--

1 0

(ITS#5356) Catching index ownership errors
by rra＠stanford.edu 06 Feb '08

06 Feb '08

Full_Name: Russ Allbery Version: 2.4.7 OS: Debian GNU/Linux URL: Submission from: (NULL) (171.66.157.16) One of the most common problems we see in Debian with people new to OpenLDAP is that they run slapindex as root when they're running their directory server as a non-root user and hence break the file ownership and the database. Would it be possible to add a check in slapindex where, if slapindex is running as root and the database files are owned by a different user, it would either refuse to run (possibly overideable by a flag) or at least print a warning saying that ownership may have to be fixed later? One possible problem, I know, is that the names of the database files are a matter for the database backend and slapindex really shouldn't know what they are. But maybe the check could somehow be added to back-bdb and back-hdb and exposed for slapindex to use?

1 0

(ITS#5355) back-meta calls back-ldap directly
by rra＠stanford.edu 06 Feb '08

06 Feb '08

Full_Name: Russ Allbery Version: 2.4.7 OS: Debian GNU/Linux URL: Submission from: (NULL) (171.66.157.16) back-meta currently makes direct calls to back-ldap. The specific way in which this caused problems is that Debian uses a patched libltdl (to deal with other problems unrelated to OpenLDAP) across the whole distribution which does not open modules with the RTDL_GLOBAL flag and hence doesn't populate all functions into the global namespace. However, my understanding is that regardless of the merits of that particular decision, the current linkage between back-meta and back-ldap is against OpenLDAP's module policy and it's something that you would want to correct.

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by rra＠stanford.edu 06 Feb '08

06 Feb '08

rra(a)stanford.edu writes: > Steve had an ugly hack to work around this by linking the meta backend > against the bdb backend. Doing that isn't the ugly part -- that's > actually formally correct and really is what libtool should be doing in > the first place. The ugly part is that libtool *really* doesn't like > linking against something that doesn't start with lib*. Sorry, I didn't double-check the original report and got this confused. I believe it's back-ldap that back-meta has a dependency on, not back-bdb. -- Russ Allbery (rra(a)stanford.edu) <http://www.eyrie.org/~eagle/>

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by orenl＠cs.columbia.edu 06 Feb '08

06 Feb '08

Russ Allbery wrote: > Oren Laadan <orenl(a)cs.columbia.edu> writes: >> Russ Allbery wrote: >>> orenl(a)cs.columbia.edu writes: > >>>> Our configuration uses both BDB and META back-ends; as it turns out >>>> the standard debian package of LDAP fails to run with the META >>>> back-end configured (see also complaints here: >>>> http://www.openldap.org/lists/openldap-bugs/200705/msg00011.html and >>>> here: http://arkiv.netbsd.se/?ml=OpenLDAP-bugs&a=2007-02&t=3076794). > >>> Yeah, we're still trying to figure out the best way to fix that. >>> libtool has some serious problems with how it handles namespaces when >>> dynamically loading modules, and fixing one set of problems creates a >>> separate set of problems. (This particular problem is Debian-specific >>> and not a problem with the upstream OpenLDAP.) >> :( >> >> Well, the good news is that it isn't a show-stopper, and the simple >> workaround is to compile the code from scratch. > > Specifically, the workaround is to compile the code with the upstream > libtool instead of with Debian's libtool, since upstream libtool imports > all module symbols into the global namespace. Debian's libtool has been > modified to not do this because it causes all sorts of other problems in > the general case, but not doing this breaks the meta backend because it > wants to reference symbols from the bdb backend. > > Steve had an ugly hack to work around this by linking the meta backend > against the bdb backend. Doing that isn't the ugly part -- that's > actually formally correct and really is what libtool should be doing in > the first place. The ugly part is that libtool *really* doesn't like > linking against something that doesn't start with lib*. > >> What's really bothering me, is that the system repeatedly and frequently >> hangs with my configuration ... (my users aren't happy with me >> recently). Do you have any idea how to investigate that ? > > Not beyond the standard advice to investigate what the server is doing > during a hang using gdb attach or strace. done that. couldn't find anything interesting: some threads where waiting in some posix-threads related place (most of them were in thread-join if I recall correctly). as I'm not familiar with ldap implementation, was hard to just dive in without prior knowledge. note that the problems happens becomes more acute when I set the "idle_timeout" to 30 seconds; the system is much more tolerant when it isn't set. > > We have yet to have a chance to do intensive testing of 2.4.7. (Debian > testing really is a testing distribution that doesn't have production > stability.) > I observed the exact same behavior on 2.3.9 (latest stable) that I compiled from scratch; this is actually the reason why I moved to 2.4.7 (hoped it would be better). Is there someone who can work with me on getting to the root cause and hopefully getting it fixed ? Oren.

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by rra＠stanford.edu 06 Feb '08

06 Feb '08

Oren Laadan <orenl(a)cs.columbia.edu> writes: > Russ Allbery wrote: >> orenl(a)cs.columbia.edu writes: >>> Our configuration uses both BDB and META back-ends; as it turns out >>> the standard debian package of LDAP fails to run with the META >>> back-end configured (see also complaints here: >>> http://www.openldap.org/lists/openldap-bugs/200705/msg00011.html and >>> here: http://arkiv.netbsd.se/?ml=OpenLDAP-bugs&a=2007-02&t=3076794). >> Yeah, we're still trying to figure out the best way to fix that. >> libtool has some serious problems with how it handles namespaces when >> dynamically loading modules, and fixing one set of problems creates a >> separate set of problems. (This particular problem is Debian-specific >> and not a problem with the upstream OpenLDAP.) > > :( > > Well, the good news is that it isn't a show-stopper, and the simple > workaround is to compile the code from scratch. Specifically, the workaround is to compile the code with the upstream libtool instead of with Debian's libtool, since upstream libtool imports all module symbols into the global namespace. Debian's libtool has been modified to not do this because it causes all sorts of other problems in the general case, but not doing this breaks the meta backend because it wants to reference symbols from the bdb backend. Steve had an ugly hack to work around this by linking the meta backend against the bdb backend. Doing that isn't the ugly part -- that's actually formally correct and really is what libtool should be doing in the first place. The ugly part is that libtool *really* doesn't like linking against something that doesn't start with lib*. > What's really bothering me, is that the system repeatedly and frequently > hangs with my configuration ... (my users aren't happy with me > recently). Do you have any idea how to investigate that ? Not beyond the standard advice to investigate what the server is doing during a hang using gdb attach or strace. We have yet to have a chance to do intensive testing of 2.4.7. (Debian testing really is a testing distribution that doesn't have production stability.) -- Russ Allbery (rra(a)stanford.edu) <http://www.eyrie.org/~eagle/>

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by orenl＠cs.columbia.edu 06 Feb '08

06 Feb '08

Russ Allbery wrote: > orenl(a)cs.columbia.edu writes: > >> Our configuration uses both BDB and META back-ends; as it turns out the >> standard debian package of LDAP fails to run with the META back-end >> configured (see also complaints here: >> http://www.openldap.org/lists/openldap-bugs/200705/msg00011.html and >> here: http://arkiv.netbsd.se/?ml=OpenLDAP-bugs&a=2007-02&t=3076794). > > Yeah, we're still trying to figure out the best way to fix that. libtool > has some serious problems with how it handles namespaces when dynamically > loading modules, and fixing one set of problems creates a separate set of > problems. (This particular problem is Debian-specific and not a problem > with the upstream OpenLDAP.) :( Well, the good news is that it isn't a show-stopper, and the simple workaround is to compile the code from scratch. What's really bothering me, is that the system repeatedly and frequently hangs with my configuration ... (my users aren't happy with me recently). Do you have any idea how to investigate that ? Thanks, Oren.

1 0

Re: (ITS#5354) slapd repeatedly hangs and stops reponding
by rra＠stanford.edu 06 Feb '08

06 Feb '08

orenl(a)cs.columbia.edu writes: > Our configuration uses both BDB and META back-ends; as it turns out the > standard debian package of LDAP fails to run with the META back-end > configured (see also complaints here: > http://www.openldap.org/lists/openldap-bugs/200705/msg00011.html and > here: http://arkiv.netbsd.se/?ml=OpenLDAP-bugs&a=2007-02&t=3076794). Yeah, we're still trying to figure out the best way to fix that. libtool has some serious problems with how it handles namespaces when dynamically loading modules, and fixing one set of problems creates a separate set of problems. (This particular problem is Debian-specific and not a problem with the upstream OpenLDAP.) -- Russ Allbery (rra(a)stanford.edu) <http://www.eyrie.org/~eagle/>

1 0

(ITS#5354) slapd repeatedly hangs and stops reponding
by orenl＠cs.columbia.edu 06 Feb '08

06 Feb '08

Full_Name: Oren Laadan Version: 2.4.7 OS: debian/sid URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (128.59.18.70) Description: The slapd server hangs frequently, and completely stops responding to any request. This results in the entire machine (as well as all clients) becoming unresponsive. Under certain configurations it can happen as frequently as every few minutes. As a temporary measure, we have a script that restarts the server every 10 minutes, just in case. Operating System: Debian Sid Linux ____ 2.6.22-3-amd64 #1 SMP Mon Nov 12 10:28:43 UTC 2007 x86_64 GNU/Linux LDAP version: Our configuration uses both BDB and META back-ends; as it turns out the standard debian package of LDAP fails to run with the META back-end configured (see also complaints here: http://www.openldap.org/lists/openldap-bugs/200705/msg00011.html and here: http://arkiv.netbsd.se/?ml=OpenLDAP-bugs&a=2007-02&t=3076794). So I downloaded the 2.4.7 and compiled with the following options: ./configure \ --enable-dynamic \ --prefix=/opt/ldap-2.4.7 \ --sysconfdir=/etc \ --localstatedir=/var/lib \ --disable-ipv6 \ --enable-spasswd \ --enable-bdb --enable-hdb --enable-ldap --enable-meta --enable-relay \ --enable-overlays \ --with-threads \ --with-tls Setup: Our server is used by clients in abc.main.example.com domain, who are also part of main.example.com domain. In the latter there is already an ldap server ldap.main.example.com; Our server builds on that server extending it by adding some records (e.g. groups that are private to abc.main.example.com). To implement this, I first built a BDB backend that holds the local data that is added to the big database, serving the domain abc.main.example.com. Then I setup a META backend that redirects queries to both the parent server and to the local server; sending to local server also uses "suffixmassage" to convert from the original domain (main.example.com) to the domain (abc.main.example.com). Note that the clients are configured for the regular, original domain, that is main.example.com. Therefore the new domain is only for internal use within the LDAP server. See the configuration file for details. Problem: Originally the config file didn't have the two lines setting "thread" and "idle_timeout"; To reproduce the problem, we would run on one of the clients a script that opens 300 ssh connections outside to some destinations. The ldap server would freeze. Looking for a solution, some posts in google suggested playing with these two parameters. So I added them. And - voila - now it not only happens under those circumstances, but in fact it happens randomly and frequently, maybe every 15 minutes or so, sometimes more sometimes less. It's quite reproducible, and I'm willing to work with whoever to try to solve this. Right now our setup is hardly usable :( Logs and other material are avilable on request. Config file: ---------------------------------------------------------------------------- include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/autofs.schema include /etc/ldap/schema/dnszone.schema include /etc/ldap/schema/dhcp.schema # Where the pid file is put. The init.d script # will not stop the server if you change this. pidfile /var/run/slapd/slapd.pid # List of arguments that were passed to the server argsfile /var/run/slapd/slapd.args # Read slapd.conf(5) for possible values #loglevel 256 loglevel 64 # TRY TO SOLVE ISSUES ? threads 32 idletimeout 30 # Where the dynamically loaded modules are stored # [orenl] we use statically build backends/overlays modulepath /opt/ldap/lib moduleload back_ldap moduleload back_meta moduleload back_bdb # The maximum number of entries that is returned for a search operation sizelimit 10000 # The tool-threads parameter sets the actual amount of cpu's that is used # for indexing. tool-threads 1 ####################################################################### # Specific Backend Directives for bdb: backend bdb TLSCipherSuite HIGH:MEDIUM:LOW TLSCACertificateFile /etc/ldap/ssl/SOME_IP.crt TLSCertificateFile /etc/ldap/ssl/SOME_IP.crt TLSCertificateKeyFile /etc/ldap/ssl/SOME_IP.pem TLSVerifyClient try ####################################################################### # Specific Backend Directives for meta: backend meta TLSCipherSuite HIGH:MEDIUM:LOW TLSCACertificateFile /etc/ldap/ssl/SOME_IP.crt TLSCACertificateFile /etc/ssl/certs/OTHER_IP.crt TLSCertificateFile /etc/ldap/ssl/SOME_IP.crt TLSCertificateKeyFile /etc/ldap/ssl/SOME_IP.pem TLSVerifyClient allow ####################################################################### # Specific Directives for database #1, of type bdb: database bdb # The base of your directory in database #1 suffix "dc=abc,dc=main,dc=example,dc=com" readonly on # rootdn directive for specifying a superuser on the database. This is needed # for syncrepl. #rootdn "cn=admin,dc=main,dc=example,dc=com" #rootpw "change" # Where the database file are physically stored for database #1 directory "/var/lib/ldap" # For the Debian package we use 2MB as default but be sure to update this # value if you have plenty of RAM dbconfig set_cachesize 0 2097152 0 # Sven Hartge reported that he had to set this value incredibly high # to get slapd running at all. See http://bugs.debian.org/303057 # for more information. # Number of objects that can be locked at the same time. dbconfig set_lk_max_objects 1500 # Number of locks (both requested and granted) dbconfig set_lk_max_locks 1500 # Number of lockers dbconfig set_lk_max_lockers 1500 # Indexing options for database #1 index objectClass eq # Save the time that the entry gets modified, for database #1 lastmod on # Everyone can read everything. #access to * by * read ####################################################################### # Specific Directives for database #2, of type 'ldap': database meta lastmod off #rebind-as-user yes # The base of your directory in database #3 suffix "dc=main,dc=example,dc=com" uri "ldaps://OTHER_IP/dc=main,dc=example,dc=com" uri "ldaps:///dc=main,dc=example,dc=com" suffixmassage "dc=main,dc=example,dc=com" "dc=abc,dc=main,dc=eaxmple,dc=com" ----------------------------------------------------------------------------

1 0

Re: (ITS#5353) openssl vs gnutls: gnutls doesn't fit
by quanah＠zimbra.com 06 Feb '08

06 Feb '08

Read ITS#5341. It has the fix. --Quanah --On February 6, 2008 5:44:26 PM +0000 korsani(a)caramail.com wrote: > Full_Name: GG > Version: 2.4.7 > OS: Linux > URL: ftp://ftp.openldap.org/incoming/ > Submission from: (NULL) (194.2.41.131) > > > I was investigated a problem: I couldn't ldapsearch to my ldap directory > in TLS: > ldapsearch -Z -H ldap://127.0.0.1 -x uid=gab returns: > > ldap_start_tls: Connect error (-11) > ldap_result: Can't contact LDAP server (-1) > > It is an openldap 2.4.7 on Debian (Etch). It is built against gnutls. And > as it was working with openldap 2.3.30, and it works with openldap 2.4.7 > built on Crux (self-made package, built against openssl), I tried to > compile it on my gentoo ('cause it has the .h of everything, and much > more CPU :) ), from sources. > > When built with --with-tls=openssl, the ldapsearch above is ok. > When built with --with-tls=gnutls, it fails: > > I modify slapd.conf accordingly to match the syntax of tlsciphersuite with > gnutls or openssl > > Debugs > slapd: > [ ... ] > TLS: gnutls_certificate_verify_peers2 failed -49 > connection_read(12): TLS accept failure error=-1 id=1, closing > connection_closing: readying conn=1 sd=12 for close > daemon: activity on 1 descriptor > daemon: activity on: > daemon: epoll: listen=7 active_threads=0 tvp=NULL > connection_close: conn=1 sd=12 > daemon: removing 12 > tls_write: want=181, written=181 > 0000: 15 03 01 00 b0 0f 12 bd 11 3a 31 7b 10 f9 c3 f7 > .........:1{.... 0010: 87 dd 18 94 3d 19 52 5b 9a 30 8a 9c f6 a0 ac > c7 ....=.R[.0...... 0020: 2f 7d 10 6a 21 55 aa b3 25 72 50 a1 c6 2e > 16 e8 /}.j!U..%rP..... 0030: 50 89 bc 65 d0 2a 5e 61 b5 44 8a e9 b0 > 01 cb 9f P..e.*^a.D...... 0040: e4 85 81 9e 33 16 57 8b a8 32 ce 14 > 2f 5a 38 0e ....3.W..2../Z8. 0050: 12 f0 85 75 77 df 1b 57 56 c1 fb > ae 2a cc 72 29 ...uw..WV...*.r) 0060: c7 38 eb d3 3c 3b d4 8e ba 29 > e6 8d 09 15 70 5f .8..<;...)....p_ 0070: 79 07 3e 8e 5a 9e c1 82 9f > 39 73 ac b0 22 a4 31 y.>.Z....9s..".1 0080: d2 43 3a 09 b5 3d 07 b6 > e7 17 14 5e 65 d5 ed 2d .C:..=.....^e..- 0090: 71 09 c2 ea b9 c8 6a > 35 2c b7 18 4b 33 7e 72 52 q.....j5,..K3~rR 00a0: bb b9 f4 bc 0a 23 > 4b f0 be dc 64 ef 3f bd a6 3a .....#K...d.?..: 00b0: 71 8e 07 64 90 > q..d. tls_read: want=5 error=Ressource temporairement non disponible > conn=1 fd=12 closed (TLS negotiation failure) > > ldapsearch: > [ ... ] > ldap_chkResponseList ld 0x8057dd8 msgid 2 all 1 > ldap_chkResponseList returns ld 0x8057dd8 NULL > ldap_int_select > read1msg: ld 0x8057dd8 msgid 2 all 1 > ber_get_next > tls_read: want=5, got=5 > 0000: 15 03 01 00 b0 ..... > tls_read: want=176, got=176 > 0000: 0f 12 bd 11 3a 31 7b 10 f9 c3 f7 87 dd 18 94 3d > ....:1{........= 0010: 19 52 5b 9a 30 8a 9c f6 a0 ac c7 2f 7d 10 6a > 21 .R[.0....../}.j! 0020: 55 aa b3 25 72 50 a1 c6 2e 16 e8 50 89 bc > 65 d0 U..%rP.....P..e. 0030: 2a 5e 61 b5 44 8a e9 b0 01 cb 9f e4 85 > 81 9e 33 *^a.D..........3 0040: 16 57 8b a8 32 ce 14 2f 5a 38 0e 12 > f0 85 75 77 .W..2../Z8....uw 0050: df 1b 57 56 c1 fb ae 2a cc 72 29 > c7 38 eb d3 3c ..WV...*.r).8..< 0060: 3b d4 8e ba 29 e6 8d 09 15 70 > 5f 79 07 3e 8e 5a ;...)....p_y.>.Z 0070: 9e c1 82 9f 39 73 ac b0 22 > a4 31 d2 43 3a 09 b5 ....9s..".1.C:.. 0080: 3d 07 b6 e7 17 14 5e 65 > d5 ed 2d 71 09 c2 ea b9 =.....^e..-q.... 0090: c8 6a 35 2c b7 18 4b > 33 7e 72 52 bb b9 f4 bc 0a .j5,..K3~rR..... 00a0: 23 4b f0 be dc 64 > ef 3f bd a6 3a 71 8e 07 64 90 #K...d.?..:q..d. TLS trace: SSL3 alert > read:warning:close notify > ldap_read: want=8, got=0 > > ber_get_next failed. > ldap_perror > ldap_result: Can't contact LDAP server (-1) > > Versions: > gnutls: 2.0.4 > openssl: 0.9.8g > > -- Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration

1 0

(ITS#5353) openssl vs gnutls: gnutls doesn't fit
by korsani＠caramail.com 06 Feb '08

06 Feb '08

Full_Name: GG Version: 2.4.7 OS: Linux URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (194.2.41.131) I was investigated a problem: I couldn't ldapsearch to my ldap directory in TLS: ldapsearch -Z -H ldap://127.0.0.1 -x uid=gab returns: ldap_start_tls: Connect error (-11) ldap_result: Can't contact LDAP server (-1) It is an openldap 2.4.7 on Debian (Etch). It is built against gnutls. And as it was working with openldap 2.3.30, and it works with openldap 2.4.7 built on Crux (self-made package, built against openssl), I tried to compile it on my gentoo ('cause it has the .h of everything, and much more CPU :) ), from sources. When built with --with-tls=openssl, the ldapsearch above is ok. When built with --with-tls=gnutls, it fails: I modify slapd.conf accordingly to match the syntax of tlsciphersuite with gnutls or openssl Debugs slapd: [ ... ] TLS: gnutls_certificate_verify_peers2 failed -49 connection_read(12): TLS accept failure error=-1 id=1, closing connection_closing: readying conn=1 sd=12 for close daemon: activity on 1 descriptor daemon: activity on: daemon: epoll: listen=7 active_threads=0 tvp=NULL connection_close: conn=1 sd=12 daemon: removing 12 tls_write: want=181, written=181 0000: 15 03 01 00 b0 0f 12 bd 11 3a 31 7b 10 f9 c3 f7 .........:1{.... 0010: 87 dd 18 94 3d 19 52 5b 9a 30 8a 9c f6 a0 ac c7 ....=.R[.0...... 0020: 2f 7d 10 6a 21 55 aa b3 25 72 50 a1 c6 2e 16 e8 /}.j!U..%rP..... 0030: 50 89 bc 65 d0 2a 5e 61 b5 44 8a e9 b0 01 cb 9f P..e.*^a.D...... 0040: e4 85 81 9e 33 16 57 8b a8 32 ce 14 2f 5a 38 0e ....3.W..2../Z8. 0050: 12 f0 85 75 77 df 1b 57 56 c1 fb ae 2a cc 72 29 ...uw..WV...*.r) 0060: c7 38 eb d3 3c 3b d4 8e ba 29 e6 8d 09 15 70 5f .8..<;...)....p_ 0070: 79 07 3e 8e 5a 9e c1 82 9f 39 73 ac b0 22 a4 31 y.>.Z....9s..".1 0080: d2 43 3a 09 b5 3d 07 b6 e7 17 14 5e 65 d5 ed 2d .C:..=.....^e..- 0090: 71 09 c2 ea b9 c8 6a 35 2c b7 18 4b 33 7e 72 52 q.....j5,..K3~rR 00a0: bb b9 f4 bc 0a 23 4b f0 be dc 64 ef 3f bd a6 3a .....#K...d.?..: 00b0: 71 8e 07 64 90 q..d. tls_read: want=5 error=Ressource temporairement non disponible conn=1 fd=12 closed (TLS negotiation failure) ldapsearch: [ ... ] ldap_chkResponseList ld 0x8057dd8 msgid 2 all 1 ldap_chkResponseList returns ld 0x8057dd8 NULL ldap_int_select read1msg: ld 0x8057dd8 msgid 2 all 1 ber_get_next tls_read: want=5, got=5 0000: 15 03 01 00 b0 ..... tls_read: want=176, got=176 0000: 0f 12 bd 11 3a 31 7b 10 f9 c3 f7 87 dd 18 94 3d ....:1{........= 0010: 19 52 5b 9a 30 8a 9c f6 a0 ac c7 2f 7d 10 6a 21 .R[.0....../}.j! 0020: 55 aa b3 25 72 50 a1 c6 2e 16 e8 50 89 bc 65 d0 U..%rP.....P..e. 0030: 2a 5e 61 b5 44 8a e9 b0 01 cb 9f e4 85 81 9e 33 *^a.D..........3 0040: 16 57 8b a8 32 ce 14 2f 5a 38 0e 12 f0 85 75 77 .W..2../Z8....uw 0050: df 1b 57 56 c1 fb ae 2a cc 72 29 c7 38 eb d3 3c ..WV...*.r).8..< 0060: 3b d4 8e ba 29 e6 8d 09 15 70 5f 79 07 3e 8e 5a ;...)....p_y.>.Z 0070: 9e c1 82 9f 39 73 ac b0 22 a4 31 d2 43 3a 09 b5 ....9s..".1.C:.. 0080: 3d 07 b6 e7 17 14 5e 65 d5 ed 2d 71 09 c2 ea b9 =.....^e..-q.... 0090: c8 6a 35 2c b7 18 4b 33 7e 72 52 bb b9 f4 bc 0a .j5,..K3~rR..... 00a0: 23 4b f0 be dc 64 ef 3f bd a6 3a 71 8e 07 64 90 #K...d.?..:q..d. TLS trace: SSL3 alert read:warning:close notify ldap_read: want=8, got=0 ber_get_next failed. ldap_perror ldap_result: Can't contact LDAP server (-1) Versions: gnutls: 2.0.4 openssl: 0.9.8g

1 0

Re: (ITS#5346) overlay and config backend
by h.b.furuseth＠usit.uio.no 06 Feb '08

06 Feb '08

I wrote: > On the other hand, this is strange: > >> cn=config >> - cn= schema >> - cn={0}core >> - olcDatabase={-1}frontend >> - olcDatabase={0}config >> - olcDatabase={-1}ndb_pl >> + olcoverlay={0}ndbover > > Two different databases should not have the same number. > ndb_pl should get {1}. Ignore that cn=config tree. The submitter tells me it was a copy&paste error when he posted the ITS. -- Hallvard

1 0

Re: (ITS#5332) multimaster replication crash
by Marcel.Ritter＠rrze.uni-erlangen.de 05 Feb '08

05 Feb '08

This is a multi-part message in MIME format. --------------020804010101020205090300 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Gavin Henry schrieb: >> # compile openldap >> ./configure >> make >> > > This should be: > > ./configure > make depend > make > make test (after of course copying you hacked test script). > Makes no difference, see attaches log, script, test. Bye, Marcel --------------020804010101020205090300 Content-Type: application/x-shellscript; name="runit.sh" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="runit.sh" IyEvYmluL2Jhc2gKCnJtIC1yZiBvcGVubGRhcC0yLjQuNwp0YXIgeGpmIC4uL1NPVVJDRVMv b3BlbmxkYXAtMi40LjcudGFyLmJ6MgpjZCBvcGVubGRhcC0yLjQuNwouL2NvbmZpZ3VyZQpt YWtlIGRlcGVuZAptYWtlCmNwIC90bXAvdGVzdDA1MC1zeW5jcmVwbC1tdWx0aW1hc3RlciB0 ZXN0cy9zY3JpcHRzLwpta2RpciAtcCB0ZXN0cy9kYXRhL3Rlc3QwNTAvCmNkIHRlc3RzL2Rh dGEvdGVzdDA1MC8KL3RtcC91c2Vyc2xkaWYyLnB5IHwgc3BsaXQgLWwgMjAwMDAgLQpjZCAt Cm1ha2UgdGVzdAo= --------------020804010101020205090300 Content-Type: text/plain; name="test050-syncrepl-multimaster" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="test050-syncrepl-multimaster" #! /bin/sh # $OpenLDAP: pkg/ldap/tests/scripts/test050-syncrepl-multimaster,v 1.7 2008/01/07 23:20:17 kurt Exp $ ## This work is part of OpenLDAP Software <http://www.openldap.org/>. ## ## Copyright 1998-2008 The OpenLDAP Foundation. ## All rights reserved. ## ## Redistribution and use in source and binary forms, with or without ## modification, are permitted only as authorized by the OpenLDAP ## Public License. ## ## A copy of this license is available in the file LICENSE in the ## top-level directory of the distribution or, alternatively, at ## <http://www.OpenLDAP.org/license.html>. echo "running defines.sh" . $SRCDIR/scripts/defines.sh if test $SYNCPROV = syncprovno; then echo "Syncrepl provider overlay not available, test skipped" exit 0 fi PRODIR=$TESTDIR/pro CONDIR=$TESTDIR/con CONDIR2=$TESTDIR/con2 DBPRO=$PRODIR/db DBCON=$CONDIR/db DBCON2=$CONDIR2/db CFPRO=$PRODIR/slapd.d CFCON=$CONDIR/slapd.d CFCON2=$CONDIR2/slapd.d mkdir -p $TESTDIR $PRODIR $CONDIR $CONDIR2 $DBPRO $DBCON $DBCON2 $CFPRO $CFCON $CFCON2 $SLAPPASSWD -g -n >$CONFIGPWF # # Test replication of dynamic config: # - start producer # - start consumer # - start consumer2 # - configure over ldap # - populate over ldap # - configure syncrepl over ldap # - retrieve database over ldap and compare against expected results # echo "Initializing server configurations..." $SLAPADD -F $CFCON2 -n 0 <<EOF dn: cn=config objectClass: olcGlobal cn: config olcServerID: 3 dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW:< file://$CONFIGPWF EOF $SLAPADD -F $CFCON -n 0 <<EOF dn: cn=config objectClass: olcGlobal cn: config olcServerID: 2 dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW:< file://$CONFIGPWF EOF $SLAPADD -F $CFPRO -n 0 <<EOF dn: cn=config objectClass: olcGlobal cn: config olcServerID: 1 dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW:< file://$CONFIGPWF EOF echo "Starting producer slapd on TCP/IP port $PORT1..." cd $PRODIR $SLAPD -F slapd.d -h $URI1 -d $LVL $TIMING > $LOG1 2>&1 & PID=$! if test $WAIT != 0 ; then echo PID $PID read foo fi KILLPIDS="$PID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that producer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI1 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Inserting syncprov overlay on producer..." if [ "$SYNCPROV" = syncprovmod ]; then $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF > $TESTOUT 2>&1 dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: ../../../servers/slapd/overlays olcModuleLoad: syncprov.la EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for moduleLoad ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi fi # # Note that we configure a timeout here; it's possible for both # servers to attempt to bind to each other while a modify to # cn=config is in progress. When the modify pauses the thread pool # neither server will progress. The timeout will drop the syncrepl # attempt and allow the modifies to complete. # read CONFIGPW < $CONFIGPWF $LDAPMODIFY -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >> $TESTOUT 2>&1 dn: cn=config changetype: modify replace: olcServerID olcServerID: 1 $URI1 olcServerID: 2 $URI2 olcServerID: 3 $URI3 dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 - add: olcMirrorMode olcMirrorMode: TRUE EOF RC=$? if test $RC != 0 ; then echo "ldapmodify failed for syncrepl config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Starting consumer slapd on TCP/IP port $PORT2..." cd $CONDIR $SLAPD -F ./slapd.d -h $URI2 -d $LVL $TIMING > $LOG2 2>&1 & SLAVEPID=$! if test $WAIT != 0 ; then echo SLAVEPID $SLAVEPID read foo fi KILLPIDS="$KILLPIDS $SLAVEPID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI2 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Configuring syncrepl on consumer..." $LDAPMODIFY -D cn=config -H $URI2 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 - add: olcMirrorMode olcMirrorMode: TRUE EOF echo "Starting consumer2 slapd on TCP/IP port $PORT3..." cd $CONDIR2 $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING > $LOG3 2>&1 & SLAVE2PID=$! if test $WAIT != 0 ; then echo SLAVE2PID $SLAVE2PID read foo fi KILLPIDS="$KILLPIDS $SLAVE2PID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer2 slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI3 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Configuring syncrepl on consumer2..." $LDAPMODIFY -D cn=config -H $URI3 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 - add: olcMirrorMode olcMirrorMode: TRUE EOF echo "Adding schema and databases on producer..." $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 include: file://$ABS_SCHEMADIR/core.ldif include: file://$ABS_SCHEMADIR/cosine.ldif include: file://$ABS_SCHEMADIR/inetorgperson.ldif include: file://$ABS_SCHEMADIR/openldap.ldif include: file://$ABS_SCHEMADIR/nis.ldif EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for schema config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi if [ "$BACKENDTYPE" = mod ]; then $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: ../../../servers/slapd/back-$BACKEND olcModuleLoad: back_$BACKEND.la EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for backend config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi fi $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: olcDatabase={1}$BACKEND,cn=config objectClass: olcDatabaseConfig objectClass: olc${BACKEND}Config olcDatabase: {1}$BACKEND olcSuffix: $BASEDN olcDbDirectory: ./db olcRootDN: $MANAGERDN olcRootPW: $PASSWD olcSyncRepl: rid=004 provider=$URI1 binddn="$MANAGERDN" bindmethod=simple credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly interval=00:00:00:10 retry="5 5 300 5" timeout=1 olcSyncRepl: rid=005 provider=$URI2 binddn="$MANAGERDN" bindmethod=simple credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly interval=00:00:00:10 retry="5 5 300 5" timeout=1 olcSyncRepl: rid=006 provider=$URI3 binddn="$MANAGERDN" bindmethod=simple credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly interval=00:00:00:10 retry="5 5 300 5" timeout=1 olcMirrorMode: TRUE dn: olcOverlay=syncprov,olcDatabase={1}${BACKEND},cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for database config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapadd to populate producer..." $LDAPADD -D "$MANAGERDN" -H $URI1 -w $PASSWD -f $LDIFORDERED \ >> $TESTOUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapadd failed for database config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi SLEEP=20 echo "Waiting $SLEEP seconds for syncrepl to receive changes..." sleep $SLEEP echo "Using ldapsearch to check that syncrepl received database changes..." RC=32 for i in 0 1 2 3 4 5; do RESULT=`$LDAPSEARCH -H $URI2 \ -s base -b "cn=Ursula Hampster,ou=Alumni Association,ou=People,dc=example,dc=com" \ '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'` if test "x$RESULT" = "xOK" ; then RC=0 break fi echo "Waiting 5 seconds for syncrepl to receive changes..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to check that syncrepl received database changes on consumer2..." RC=32 for i in 0 1 2 3 4 5; do RESULT=`$LDAPSEARCH -H $URI3 \ -s base -b "cn=Ursula Hampster,ou=Alumni Association,ou=People,dc=example,dc=com" \ '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'` if test "x$RESULT" = "xOK" ; then RC=0 break fi echo "Waiting 5 seconds for syncrepl to receive changes..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read config from the producer..." $LDAPSEARCH -b cn=config -D cn=config -H $URI1 -y $CONFIGPWF \ 'objectclass=*' > $MASTEROUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at producer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read config from the consumer..." $LDAPSEARCH -b cn=config -D cn=config -H $URI2 -y $CONFIGPWF \ 'objectclass=*' > $SLAVEOUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read config from consumer2..." $LDAPSEARCH -b cn=config -D cn=config -H $URI3 -y $CONFIGPWF \ 'objectclass=*' > $SLAVE2OUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer2 ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Filtering producer results..." . $LDIFFILTER < $MASTEROUT > $MASTERFLT echo "Filtering consumer results..." . $LDIFFILTER < $SLAVEOUT > $SLAVEFLT echo "Filtering consumer2 results..." . $LDIFFILTER < $SLAVE2OUT > $SLAVE2FLT echo "Comparing retrieved configs from producer and consumer..." $CMP $MASTERFLT $SLAVEFLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer configs differ" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit 1 fi echo "Comparing retrieved configs from producer and consumer2..." $CMP $MASTERFLT $SLAVE2FLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer2 configs differ" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit 1 fi echo "Using ldapsearch to read all the entries from the producer..." $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI1 -w $PASSWD \ 'objectclass=*' > $MASTEROUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at producer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read all the entries from the consumer..." $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI2 -w $PASSWD \ 'objectclass=*' > $SLAVEOUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read all the entries from the consumer2..." $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI3 -w $PASSWD \ 'objectclass=*' > $SLAVE2OUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer2 ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi test $KILLSERVERS != no && kill -HUP $KILLPIDS echo "Filtering producer results..." . $LDIFFILTER < $MASTEROUT > $MASTERFLT echo "Filtering consumer results..." . $LDIFFILTER < $SLAVEOUT > $SLAVEFLT echo "Filtering consumer2 results..." . $LDIFFILTER < $SLAVE2OUT > $SLAVE2FLT echo "Comparing retrieved entries from producer and consumer..." $CMP $MASTERFLT $SLAVEFLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer databases differ" exit 1 fi echo "Comparing retrieved entries from producer and consumer2..." $CMP $MASTERFLT $SLAVE2FLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer2 databases differ" exit 1 fi test $KILLSERVERS != no && wait echo "Restarting servers..." echo "Starting producer slapd on TCP/IP port $PORT1..." cd $PRODIR echo "======================= RESTART =======================" >> $LOG1 $SLAPD -F ./slapd.d -h $URI1 -d $LVL $TIMING >> $LOG1 2>&1 & PID=$! if test $WAIT != 0 ; then echo PID $PID read foo fi KILLPIDS="$PID" cd $TESTWD echo "Using ldapsearch to check that producer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI1 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi #exit 0 echo "Starting consumer slapd on TCP/IP port $PORT2..." cd $CONDIR echo "======================= RESTART =======================" >> $LOG2 $SLAPD -F ./slapd.d -h $URI2 -d $LVL $TIMING >> $LOG2 2>&1 & SLAVEPID=$! if test $WAIT != 0 ; then echo SLAVEPID $SLAVEPID read foo fi KILLPIDS="$KILLPIDS $SLAVEPID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI2 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Starting consumer2 slapd on TCP/IP port $PORT3..." cd $CONDIR2 echo "======================= RESTART =======================" >> $LOG3 $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING >> $LOG3 2>&1 & SLAVE2PID=$! if test $WAIT != 0 ; then echo SLAVE2PID $SLAVE2PID read foo fi KILLPIDS="$KILLPIDS $SLAVE2PID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer2 slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI3 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi # Insert modifications and more tests here. SLEEP=10 echo "Waiting $SLEEP seconds for servers to resync..." sleep $SLEEP echo "Start gdb for:" echo "PIDS: $KILLPIDS" echo "$PWD/data/test050/" ls -l "$PWD"/data/test050/* for LDIFORDERED in $PWD/data/test050/*; do /usr/bin/time -f "%e" -o time -- $LDAPADD -D "$MANAGERDN" -H $URI1 -w $PASSWD -f $LDIFORDERED >> ldif.log 2>&1 RC=$? SLAPDS=$(pidof slapd | wc -w) TOOK=$(cat time) if [ "x$RC" = "x0" ]; then echo "Added: $(basename $LDIFORDERED) in $TOOK s - OK (# of slapds: $SLAPDS)" else echo "Added: $(basename $LDIFORDERED) in $TOOK s - Failed (# of slapds: $SLAPDS)" fi sleep 1 if [ "x$SLAPDS" != "x3" ]; then echo "At least one slapd died ... test failed" break fi done test $KILLSERVERS != no && kill -HUP $KILLPIDS echo ">>>>> Test succeeded" test $KILLSERVERS != no && wait exit 0 --------------020804010101020205090300 Content-Type: text/x-python; name="usersldif2.py" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="usersldif2.py" #!/usr/bin/env python import string import sys uids=[] for lineno in xrange(0,100000): print """dn: uid=test%(lineno)s,ou=People,dc=example,dc=com objectClass: top objectClass: posixAccount objectClass: shadowAccount objectClass: inetOrgPerson cn: User %(lineno)s gecos: User %(lineno)s gidNumber: %(lineno)s homeDirectory: /home/test%(lineno)s loginShell: /bin/bash shadowInactive: -1 shadowLastChange: 12570 shadowMax: 99999 shadowMin: 0 shadowWarning: 7 sn: test%(lineno)s uid: test%(lineno)s uidNumber: %(lineno)s userPassword: {crypt}WNu26PDD.aYC. """ % { 'lineno': lineno } --------------020804010101020205090300 Content-Type: application/x-bzip; name="log.bz2" Content-Transfer-Encoding: base64 Content-Disposition: inline; filename="log.bz2" QlpoOTFBWSZTWZ5Ih+UAyVFfnHwwf////7//3/7/////AAgADBgAYIw+fPgHBuq6ZfOGfVa8 s2qj3g7D1mmHs58+94q21eimQNGjoA5A6Pp6ddPe+4AoPoKeugfQc++4lQ+mk3dwneY61lg0 WwsGRrDYgAeAsC29zgBQAB6ADQAB3l2UFC7UwLWCumXoeXWUkoVfcyPvsAA5ABRgIZDVd9m9 vthE32ABwqk0x1pVwAAwygKlKrkad2CC6uabbaJq3caD6adybgqpIFayCCzNUop6HO0S7A1E odZxsVTDGgFTzxw6DbwcarRlVGbKu2e5uUvYAzYQDkUqIk5wBiDW2TYcuIRFcrc9MeSkD1pW itQ6eMcOkle2oKBSFU96mcezNew522pVVSSUgD2z77uj6yHwx8JIpoaBT1PKbVG/1RKfqn6S b0EQ0aZNA0aBoNA0DQNAAEqYCBCEaSMgKBspp6mmg0aBoAAADQAACU2kkiaEqfpqmPU1GJ6j QaNMIGCMgGgGJkDTRiABJ6pSRTJMBMgKbSeptNQDENBkaAGgADQDQAwUpIgTQCaAICYQAjCZ Cn5TBTAnpqbTTUMjRkAKiiCAIEyAjQmIUbU8po/Smp6R6m01PU9RkbU0bU0NNPSAe1HM5GR9 tIMlVGi6SmEZMSf8n+b/g3JuP7UXsTB8XsD/VmlCaPNwcWWiv97eH9popXAktgv+uls/aoru frUclNX+5hMqqq2JjwVEUW6uUWjIyKNCRoqxtiIiImbEkEhHntqtP4OAAAAc4AAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAABzgAAAer1Xy1/pr9iv0V045O7u78459JeTPqPGfWXn2H2n3Gs +86poeQ/A5SDafifkfmfoeU/Uggggggggggggggggggggggggggggggggggggggggggggggg gggggggggggggggggggggggggg5dwkg64UsaCZPJx2NBM0hciSdkr7JWvUNVtiTFQxSX/NLU iZshNYWZLKX4PtJxJllmf0fdpUfNkXe07CJgdFSc1JhZGGXxMuzWTBS2cm1I8MWzErdihps0 NLF27JwslzorJSSTSyHRowVWyyfVGWJJVSrZJZUlJbFllip9qpJ72jCRq9EUwmStCTkqqypW iNTQw1SVGTqwwqVgySmy1Fpi0Y5sRTTHB/c0puwr0nZlS5ZBoxmtJmSsyp9Ldc7b0skdrO+V ulk8KtiTjYYpbJnGIiMeLJYHOzMw9YKJkgePP83cM9PtPrCRe5LkkmSE+38Pv37UP8eg+ncZ Plez7t93A84chrH0XJCHdblUFX9t17dub6HzKvH6zX9l5Sk1D4ONTNDnYtv1Vrpfkd9j8DzJ i2Xv1c0Ub5fl68X1d36L/F+jyvT4OIW/u/X1eCH0uvscLRRCWJSW2l5YjFLZ52f2ee2db91j DyZZ0h5rIn53OfVuz908PmclfYVIcD9HroaE+D4uTwcilu30SFaUs0Hc4PiEMHAh0UULvB9K MjLfHNzja+DOv5v4Pvfa1622WrS2bK4x18rbaj+3Kr3VelXGEZlOouzdBILX3l8lH2GjJ6in 1H7WjtOrp18SOaQnvdpMFJLVtstS2aIqCMolBIaJNhZC2WpaFsvycmn9T3n3PgrxZe9o0ZbP sabN2z4P9zGz5PC8eezg8UhPOqxDvaazJPj6PV73AuxcVUL8dDlJtjUEMogjbwmw+H0QK+3W 3/Fi4xjGMYxeu4Du4AHdcuudwLuc7u5zdw7t77Wc8be1WtfQ21XNqrclciHcLuvG+iIdpDlU ODvxyXeSB887MLbBimruiU8DSE+ceD9j96MJT4fNeo9Qn8GFz72pNOzbPq/QGgdojxDD9X4P cfI+f4zabHtP9k2mmp2nv725nSOwjjP98fhfa3IPoTg+dpWhYKqSipuRIr31lhXh+9g9Z6tH FWHFh/OaPjE/vNB2r/KpsrZXZX6O5lUpTLDB1MiO7DopPg0auCPhNsvQPj/M+cfEfP+fbLbz l/Wz4aR51pPndT9q3qSSw8ut72MXqUnF8PEOMKiKKRDPEDpacOjDI98TZLl1p6R71CXJvDO0 QzrTNiZR0h4iY+q3rYKzdUTUol0W6RpVVVXNXpIiZ1isYxe8YKWIeFclmJWS6VJWFkvDsOmH RaxN8U6piZiHpZh1kw8OqxKOz3jFUjTZZW7xiLVimpsKzTdXvSIxXDW/0IT5H1R+D2wnpEPS UuD1qbZ+vIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrIrI rIwiyKyKyMJCLIrIqd3Hdx3cd3HdxyIiIiCQiyMIsisisisisisisiuZrWszWtZmqhoQ/lqD 6ebh+y2flUmRXGQPJD6DAY1UWoWslbq3hWwaNalS27bW80qqzFDYoNaBYypDak2wqn6KosAf ZJC6zwcLv5h8P/ZOf59UL6ULbcLbQC20ttDJbQBUWRwLAtTFQFTMxZJEEbcLUxo4Y20y1Fki ZWtwwkwAtTAsMwttJDMMkyQy1xXDMP85ktmzczO2Z4kltvX3PQ9EjfWSB349POIglbzw80fd +vsS7Pb9QuDCatosYaW2m1TWktm4tnd6B2dfci87JJ31aYUZmZBqjVGqAgCNr7c1021RtqQg AtbFtv52+aPmi+r721X4JgGAmJJkI5VCSM8NOZ8/OEUFQOYm/KQpGopLzeFxUVHlEw9hBA5W SNZrHLzIvOxc7CGCiC5Jc9wMZPiKCDBcyKYIOxlzZbrGqsnRW7OjZIknUTkviskWsDtrEtDQ 0Ta6+zXBNr+oS/wug7h8NR2S5YzCT2/za1rWtaqVtkLunkneLD6BF+O7HlnCp9vxc7fv9Z4H +6InL/e9yRgHbh7k3M9iUyizRoa7t0aOVu/z7A6HTvekRfjbr1XyUH4PW7nDsYk7OfhbNEyz /QIS6ezc2PFu0hCbcO/5Tvi4XLNWpuj1ag0wti1rCIex9IZPp+f2qfpf2+r4/NXPf3KD/G9i j2rk7fF8wdwnYTg62N7qSRfD+h/Ows+DbxTDudsnNXFh1ex4E+9xCacf1OxBxE+10dGPhEXB L3cOmdGfJjZspJVROLc7/9psJ/1H3MLW18fpiIjAJZKoCYtttlVbLZVlt/8UhzcGzm3QOk0y qeoNDCYJkRMJ6Lu1TE8FatGGVZZYZVll6X+eDxpLdERRi4hS52tlXO0q51NtcrGo1HUoxcRK MXAhUzr4/icSOL36sK4N2GVZZV0CMDhqYOugR934X4PZq8F+oveJcDweyKdzAm8Vsvedzfbg vrH8C/KYLie33T/SPCdxB8p2i5BNAnQJfc6mJ5eTnZLDgsw9WrGbS0tLY+iYMWRU9lkwKmrm qbcU/rj4RNEGqqlVK23s5OHdqwidzonFKaPZ0fjoaG7RyTn4MK4p4bdp+MVozV/BVInJ3cpq 178/dwRgjVIu1niwxYp5rPYn1URp/0HiRwNppZnwKiPAzpb6b6sYxor4+wGL+TfnvWlvrry6 VcOFldrMf04jFLZ1St/iicSVEzrZ6NOBJ2MV76acXtwOFiVyscZZ62eZu4eXA1Gag05JOkaY GzaGycZr/lmxq1slhz91916Kr7ZWEySxQYUGqXtymnLEydMY7xHF2c+lji0UTfQaEHfxbteT gxoSPM4sJgwrnr4a8udgsWxKPGWTjP5/042b83VXudnyasPk2Nj5t3FXc5ahRS5gGGHNjmSD 4iCQQQyOQIaMPk3eTm8HZfKzJwiZZWKeSu1aJq37wrG81b3FnPXNJ0RUd1cUYHFWFYZTQph6 tGpl1mzQceFcTVWWbJYdyXFJHpETiRI36zouu1d84zZRZLZqynBung4E4NoGDU1GcphJMFU4 Tg76DVx1TU1c30E0holLNsGJjvv9Dw9GqQnNOBwsipzWT7QzrJ12wxeoTbWvqbNXTdggYibm XmJo0dl4cbKlObCYMMjzJNBpDtb0ji4pyaafTv6vo+fvPO6rjI3QuNvhhcI9N0p3cyXrzrep BvUvEc3LkZ2MWWW2JwcZxt755uZ12Pd83FObQ5OBicXBsn6FR2KiiPkZH6FGSN+Fdng/rTTS yvSz0A6Ol16scWUmybrJ2t2T4cXqy68ysOJwsipxWTdsTi6ni9yztyW8OVfJwxWrVbCNmzWy WH7hHxJ8SZ0sqU7MfZ25cp488SeKs2J8FjFR+i7LDcZcGUvvLjpXNWQ3MmkylhiZpVhVhSxo ZUrEDJFIaiLk8CsbFbIymIeDD1VXUd04bOQiqKpKZ0s52a29RM/S5dGNg6MgEMUBMffJA7kL sEjBwQHMtnNsp9DzJyy4OHD3Ps4v7jsjYnRvWOPqSerxdIjVum5s5EZTJlZ427I7cNz69NpQ 7cogiIIiInyttX8qyFu4jIesyfTvPyFnQnub+CdFsU8VnlLmu5HNsNE0sio2LJtp+sJ/kPTn r6HY50RhSipnmdWutnw8d+0L1vj17E5DH1saYfrZWmS6cP+6fU5uT4qiqlO6dz3Pvmz1PL9/ 6stWtIZh3A7mUMz1cvBsNJujsy/HEYWHAXPxY0sz1Y1NMMF08WNK0ScB0ViSCfqaVW9m2iRM TPzYf00tLZx4PpINtKr60nuoooo33X4/l/rAH9Xv5vv9l+b2+q9/It+OnxtNCrRTTYpKaaFW imkpKaaJn77DM0kiV5muGhJ0aLi882zKuHHDCWLFtokK4GEDBgUphPkZOJNFVls0NFNEpRSp RsVUe9oFL32aZnyTb92jDu3503e/+2G/JdNbMXFWVrntdcVik6tY5Lz/bJGIbY6bs4Rpyr4I 6tGzkpu0Ppvws/gmya+Omtf4zGvBgrSXAwnX7NJl3U2TaMWJR4yyaPvajU0sipqoxZVtmuEw ZeiyfRYmzTWls8HkfwfM+bmnl2KvIeRzTmdHRN/1yRG8C8lncj9XsOpVVSqqVVK/i4eXqcpx 4uaeGzl8fU8eI8XZX1zTmdEHI5IHuBzFBTQYEp2WssakJHQMifrVJ3Tq+p6GE6OLxTdzmXtg YTTrVzmytLO7MxZKmZZ3cmrWcKTWH7AnvPThziHRNxulFT5iZ+naEbzqd3Nhls5K1ez8T7Gz rOrys8Z1KYaCp4GjCjRjSls/c9+M1wwwosjqy76aWzg4L3ZspwfqXcyl62FaYrTFeXSOK6r9 DuJNBolxObnpyDm6qrUnElRh0KUodfz4btE5K3cpXXTLzsmlq6vDH73NU7nORJpSPiL3ZaDK Zass2KeizG7/hvzjO02y58UHAaJk3MJOhqdlVQqUqVkandK9tDec3FvZLDwS+Tg0xaaTQZUb N8E7UurNW3Y1+cMmJlcWbmD9mWS5rSt0iaRlpJo7/b/G3+L/D/ofyjnxcVHZ0zIwxMZsoqZZ dLq9XpstFFFG/RVr2vJNeNYOssn9Dc+KlYYMMPSf+qV6JqnqmTUvWLjEMwBhMFDP73e00kUS f4Ecu21GpcRqxehjherCGxUez7GWiRptWhpGM1j0xmzLVcZrDK7ODDldv5SYZu+lY4D7UlG6 qUqpOZyka1hJG29ntcWY4/h3bkNdrN1xZyXFLZ2dufSLY3cFV+5phPm5IfrU/cqlHBqbH4Kn FSyVKwwx0aIysJSVJqYFalYUzDBpOt+1YzuTMB9gg+0QdEH3CD2HyEPMuzPdhvlODmmubOq4 s1XFnxdn3KstuMYtxuyyqsuasMqrDDCq/wtOnA4TP53Ga951GhO7UapRU6urXBmNLOMy/PbX Pv2tyKmjdkzMebGbMvGsispXWhtTZcCPY12r3tE5Op0YdYSVtOLGeD4e2zXjXey63vV8la89 KN6vERESREREkpPb6vLzc6IiX4HRJe8pokm+EMAWw4kudCHAeha1hS+QUuCW2PF+M1d3Ur+h O0xXv3zSjfvcXc/GmnA0ZSYTEqeKRK8Wy4btm2TKZJlyOxqwzOLu7m0pZnBiUspZSzGDEpZi fyf4NJo+3E+Gf28jkaz15NnDnqMpjY7Pn9jsU+nF2YVmPYqsifcfH5l+b93q+HLDqtVO7sFb k6bfBuJs4GzHa3cnmvM832nI4j5bG0qU2Y936JgaJVslh8uHyvd3icOOeetXRb7NsrKuZzG9 OTOGKfehCZbndw2stUWGV8BJwPvCeXPwkG3CzR4pvWzUapRUoslrm64zWWbzaaWzL4/B+3H6 zGWu1PD6u3NnUdyfxG5TNpMD++LPfFk+6nFqMJ93nzPkCucKM0I3kwJi9QOog3mWuggLQ3F7 9vPokZryh271mSGthEtki1CWwtRLZbFsWrYth886WcUsck2Ye99X5P9Qcg6B+hP8ToS1OpzL YtlpU+He/zAyTxC6FsUtiJbEtIwHg9GXdpEbKFESqllRJSpKe8P8owX9BOJvJ/gYdp+A95+Q w/0HobHwP5gfqP9Z7ROB/OjtR+GIe3r/JlXP2sOtW29vA2AmOQsKxxj0jtHolYSwwbQvpOoW nAMffIq79Z6w506lt7UFVbR111z1JKBMzL8nOur1vLtfHTx07VyvLfh+oj+QpMSRPwEsB9Tu qa/ecZ7onrVkfgcOzOnDgJO8Jil+XEqdhuw5NMWG4m8c1l/lkWmUfZH5ENDFs/E25LFU2Yfe 09dTZVxFl8U8nxfJ++3dnm2bWYzEzfinwSVluy/Fs/lZTZow2T906z/ORIy5OT9nq7PN+5hq +L+0/yGByP5jxMFKngfTz7aauasylKnR8ywrDrmyYFop0VJGRkCzObgKKBmY7nl3gvGPBReV vtvnva+e8pZEmUWJJiFFlLbSlbVS1Vq+bzaP6Dxx4aN2GXV8X5OrdxfzNXo7NVbMtmzcnlwv 8nn+rP7PtkjxCH1feH0SkxGH/yeJxTzTB4lmtlpbVtVX4FufU9g9Ye9xVwYWMDk9K+T7m78h YhBqqRuo2YYVUwUZUjKtum1vu523KiKKLUbBF4le01nxT3OLq4Nnyx89OWc6Z06k7o6NWILa WsWa1UPowsyr9Dk5Ojsc3Rjk6MJfT9kRe9VK7IiyqqyIv3NIj8T4IiJpatWrZVfyTmQ/J4t3 9dEREREREaNFijRo0aNGjRo0aNGjRo0aNGjRo0aNGjRo0aKjRo2jRo0aNGjRVRUaNGjRo0aN EzKUn+GSKv+STMlZKLMplaxSNjFFERGAxmEKi0gLSlCVIlqIkRiClarNtU1ttavzUfvf1raS FzxPYd59FfMf0oNUqcIP7h1sgxQn91IthLVpmoZTpqkhlZm2ZqSNYS2SpJNoSpLZKqSSSU1k qAtM1JUkkbDKsWqStG1M1G2sUbJopIsUk9jie83g/sZPV/B+8rD8TQ/jwR2UeJ9Zh9Hke84H /Ej1n0R9u9VH1mRQv1HoeB3H33C7R4Hsvgj7ak4U5GKXeeXNhjtN36NhpLdfiOy0dEblXHEv lkR0PA5nLo9Zj1KVes+NcTK3Hirs+LpubUo+TJRmC0WotRaiIxERjWkq1G2oiMRERtbFtvzm +5mHkadxjWjDc4K7Yi/siLrXqPQ5HI7B9l1PYbnY63w/ZEWidh21q5wmsdh+EGnxMfis3M40 vadp7Hife2K0R4GhT3nwPJCO8nE/iWu2T2mJaPmXM/a/xUWMfpah+PWIyIBvZcju5BOdB3ck 5o4FGZu65c07rjuUa/oV6q2tf66WvPWixS17d1rmLRYq8XmjRobeNGo2KjlvNEiT3tGCJ9E7 MJCZ2NqxWFtsq1mZYxrNqj92Gew1EaUmKkyKyJikxS7Yix/zZSFyD8ZpSB/UkyWOORWKkyJr ILCEnB5uXkH6kPsU/paMJXZ4Pyfsap/IobqNH+BJ+io9Tiw0OLE0dXydG4dlbrGVSqfcwN2U wqjDi4J3aJJxYbH+1yeLYwor4sNdGCmGJB6uY4nIcJ8mzGa6OE3bv6mRytV8BhhwVzYTdVPF Uw0c0wwjCoV3UyO7ZhCsGjq0fNWHVls0e5+xxOTVhXVsnNMuckYTm2ap0NWBtZODVhWx4q+1 9j8Xg/WqaKwc0c1Mt2EtXiObVU6KqMvFWG7RMJllWyKpu9zwYYcWVey/59XJ4nNzc3imSlaT fk1Omr0aKqSVUcWiQmvu/hx+UtjjjO+2nhy78fljXZmEYwXhGlBvr+Zb9uBMqvEM8n3u0X2T 5VEP0U7oS5vnEbQeMPlmjshaU3TWQQlVQREEREERP9oVO/Zd8bTrnt6GYvavM+J55RUREyii IiCeE7IOid01ZU14u3ypykF1VN+st4hVNuMXh/I/CRWtfuoQbyvMwNXdpxCuo/7lYXjtIv4K bwj5VZQ7INZIgGkw3G3snhoZf72Erplta6FxBHRTCW61HpVEneU+a5F7VCy8CImxVTSqIgJX ZBm/XhmQQREtqrbVrn+ecytt8uW/Phy5468tzIj+VJD4ImS/Iqk0RPyImyysLFi/fukraoYU oxSGERm9BvVkMwq1KRWZVFkyIvyqj9hwqk1RSZFYqqplUWAmRNxwmMbSSayUSsUWllak2UmE +99Mfyfd+t+Jo/G/2fsc0apsbCmSPohojRVaLxphSYBy6n4JHHPJYKKDAhOntgcoYsKFrXM6 v2uvFyt0dDGhSuekc+DLSdnHlklOuoSASqUywGJVyHUxnaWIGzsGzZBJ5Eoz+Fx9N7M6ViCi UjLE0Kkq6EqijRLUtaXRvpu3112l3I2nqkTTH0t1fYhlnT6Gwv0MfiTMn05IcwKlXvlowv6W axilwjGELs6abK3G5TFVzc1wTbG9nyanbUajKVVk+1xKMlTOvsVnF5yYioQd/udO51OCn4+S of95Z0jr1iyY6lGSpnHSs4vWTEVeVPH1VXfvLne6afE+2qvwaXt4zD+FCw1rIAh4V67su1lL Y1CNCdfNDefhveot7JYc9I5xB13mkTn6Hu73wmFSfM8tx3xtcv7munMK3DcNnacD+F+usPiG rlto2laFy5peG939jY42pVajHN+2955vKJBDfb2dZet3SFnMueOuKxNDeuOez1hS4oyiSMQX LeFt7hOC4gohgoowa5HcQgFtwbDJBcxIod/fRR6HY70QHPcynEav7+KtjodWHk+Lk1NHsw2P JrxZTHpN2rEd2/MzKMthyjQzYBwQ5HFLkFxDBJkt2c9Txjh8CWMg5s8NbdpswpKECmipIGDf r8HLnk82K5QgO3RpOY3fzzu/hA0h3Bxj0PJogBzyTcvPnL9C+SS73jA1NQ7VJiPTxUBO4PDn d9FUbmFPah/hdSE2cIIXORnbPq5sbipTODBNtnlMF7lzxo8EHwmRqUkQztyTkoxd/Tawc34z vfu7Tie8g1jBwetRFIx2973ExA1OYQUvBk6r4UeuO5jJahHs40x20U3wxcZDHijBnv7m6TBg GWvF147NdETeJjpik73XaZzKaMnbo7NkxTbR+Ne+O3wmeeZ7kGB/hbvRXpza5WxfgYPU8Zr0 rwZNv6Gy1rCA9vkLClkC+ETSrhT49IM+FGUxEJpFTzqrvecbgyInp8fT5pfci6Oljjbo+pJR Co4UZSIhOkVOs1d7zjqDIidddPml6RdHSxxt0fTTpIEersyowvDQrpDvdW6R0aa6QjzHbfht TntnlnjlWFVur8V3WZ6Y7tnmEzWTvtLIliyAIgWbUYIv1LV/Lm2rNazKtM2FrWLE23owcmRx cjrp3D2EPi2XGYS1ByaNE+YMjklElyCDBR8hkYGEIIyQZ8c6CbbMjNgqCWFYlCSYGLj2JJGM paSbUNalHPY8yb849ffHfWp4IMD+4k6Mnxjnc89wk2duMfhsOcmODNcYb0NQm1qrJxqUZKmd eis4vOTEVCDv7eHc6nBT8d6h/ZZ0jr1iyY6lGSpnHSs4vWTEVeVPT1qu/eXO900+J86ovwaX t4zD+OFq1+3jlX5fh0hmmtJfTTf17bve2M3VW2+HTbMlE73NUTei9ey6dcwi4xJgWnSCEHZ0 y0rdi8zJnQxLqDuKOYGwwzkCi0imUIZ0lrrljMzJjI5Ihc4xvVpKXIhpHnG9vKY3WMUNdR3Q fjGLNOWXXOXXpvvI61BwFq72SVq0c/dzebRyMUZMnJpjQxck7FDDlMboMBgwgxQpI1hxS8KI QXJQY8nUHb1x38x21wX8jHRc8jnc6PVCTvnDevXDR6X6utR6yzrBRQrq7FKO+RfVo5q/bs/b BGb3brjpo5vxdajqWdYKKFdXa1LMKkZF6bv6V39I53u/dub+H8ckemjsRrPrPi0Jco9MGfQf wSoimzZ8MGLSTbzcyz4MKRBCnz8SStzm7kHHJImA8Gyhz1OiWOTrZyD2ZeOxgrJXZGGFo2YN OMXlraJJl0uPadBfvCmCrjldjEHJJn563geDWs+YPRhy9qEPBHD6zyxylg6yoBosa3R46LvX IuD5seHOkGKQ6G9RrmuR3OfB8vzmTVzOhTaC29zi9th64Dvc5yaMWMoMQ4xjsk2RlFHJ4uQd sGj0YZTlTKnKmiuFYfjue1bOIFkeyasphR2ZOlaNQyRCxDu7u1soOpSl4XRgfwRo9VgvbPpl 7akUkb3v298dc9i+jfiBPTTc2PDsvBuUPeZPcV4yuPQxjgH4b41FLFpKqadJFm1FaOQkZTJB gJAnspbcFjGaz5keF/nEl5lOh9Sd59bUlFOdLLIulamVYZWZrTMZ5zShJeIOgMAtMRCELEA7 30IEjx7Kerl1uzvpNTZ+dz8rp2/D7bv9vz48d799/K8kk/vPjCTZCaG/6iz9ClXJcVGD4ph6 W2hzYkXowv1KDK4lYXYMk+eYHTmKVNTvNDlU8XpkuTjJ1RPN5489DVEmUTnqEyqLKp0q1oi2 a0HNlcFLKltdSzBZRYZKYUyYmMMUsMaN2X1pfYpVyoY99LuJ87ivSRg8bd7lBscTsMP6Uktl 4E62UzBjNDoNPZlRLZXLA/wn+wVSqJVH+hgTB7CKVKWmFNMTTE00ItGW64MqzPSwwweoKw8M PRK0pVudpucLKDKqtWlbWB9+JLzSLK5SpZS4RJYDn+bR2Kv7yywmf3ZmxNZdrbeRiQ9nmfsR Inp+tgiR8cW9p+B92Pzn+0qI6O8QJ9uzhQAgWwWsoRV8SFyizQ6MPEg/2tSTgyyZmVYGBAZD 6wYLhBYgUGPiEFGGsEBMPR+aZwkXBQuCwMLSWixWCNOTNI7iU0C95iMP+B4aHVhYqNGxgpTv JJOzBhDODCUpStmDDDBVKp22NTRoaYYFUqmuGBqphSqYcdjghoYasCqVQqlU1NtDRoWUqiVR oyZZIiVSqVGqSNGhmIwwYJKmMDajgsqyTOhgyqqqqoxgjJjLhSL95j/CQfM6po4dUo61zidU UwiiVTxNdHAkolGveBEfcP1bIiIYYxj4RFwiLxPY1ccXsY/q00rzO53NjoeBuxEk9u7CkxQ4 lZYJMNqEzTP1Oujtp2FSo5G7ycvRsbE1YibGQjuhqqv62DCla7cl3gKZw1KrKWStGUj5mGvA jY1powjYyZUpWuWZsajWQmWqMpkWzQ24G4XNutN8L4sTg3W+yC8mU0zJWMDNPaoiz2fvkTbG 7ByV/xSLIQnWozKbxrSxSlRlexKh6KabQSQkd+1OkT/f1PqT5Pmttqqqq2nq97bAqpO/bA+e iPceR5ngfM8zu1VKkpXu7Q93I4tmr3WP7pPtNbRUtzs5pdF1cSYZ2OZp2I+CpqkXDhicf7Wn CItiYOTymjRone4VwTZg6KebOuU8c5ZTTj15K9vvfCtqvy1tfd+uJJJAM36XujKT8HWYVN3P nb3+y3o7Y74zWMZuO/hWcZz9jIhPo3x0Tfl80dZ2NkYkqPm4e2PnqydTxNzkYFQrXobUk25b HgUaSm3Xhm2M6MJxcGrTQw8Kwb4YKVVNKRAWbe6yHutYAjFoFKFr07bSIFdHiMCIu9szs/Mi ZtoMl1NB2DO3PumAoHDQcAtsA/HoJx+kwkEmpUKicG9O6bP1BtXG4dMxk4I3VUwlMqtkmy7H FDvk/DVg1csGVPHgmDjx0mUvZZs8SLWHDivUufYCehCCbDjQmOmnfYRFRnjGyIMrjBAIWyII HOwcOAQ5M5oyakYNBsNHQ1hCVs4UfQ6btXq6iZIiUQQYnpgwhbshBwcqJySqWw5I9xEazCsi S9gcmLMyJjuKWtY/CNqr9d1Vax31uEwjtEPMm+uq5zc8Tq4fk9nE5ngdTomHYk5spsvXTwRI bWJDXWrhFxb37Tvppbz5Zyv/IfUfnli17PCJO/Bu2ktMomkJU8PZyeoHsWs4grAfzMd7jpbV +2GZEZlp5VmZcrdEVkZa74sFn320aU5nA4mO3M2khEs0cOWJlxcsMqQwCCl7c5UVhx7KKX0x kcRLKJYSyFb3MFps5YQsgAFTb2LlzjAk8XwrOiK7wcXEeF3Ssru10TZsFNg/B0Eh7ywcBsMh xYjmSwZccyoWLWJ2o4wgpvoyw9hi0KIbaMub/MOmSt8Rq498xMqy8KvSMQmJgCZIkwSmlFVt okl8CUjZdEVXdYegsWsYOBxMnE5GvHpsxiJJ71BtwutWlFTtKEHEE9IyZ280p26aEIPEDA43 avBhw4L9h+YX2vN/c8L8Vs+e/RsmNmmGk0zDTVfYw/1iMff/pqfz7Epug2Msn5kZfcpe4Tci ZaP+Zhh323iYFkuMRGxJFPOdXuedfS4txH0Ywsw1aWtqGmYZsVltobKrouTvJj8bB76nPKme keD9x7L94XhSL5Wz1P6i5P+Cne0vWYkx9q3R2nafvPE9nyP4bgkHSdnj8yjvtdT6FV2DTYsL mXbA4jQ4AmALiOg/gpfNVV+m/D9CMRAgWiJUf93JL+VpjYNknBxL1vUrg4OoujxYbOlUrdZR Vi/Obr3oYVP2vN+dupuWNGJHseDdI4NxD+psn1kx8jgXBNid4mHBUHeKWn40THVudrFQc3NL gOSrHBjYLZxMScG7Z3r/0P66QfwZe6L7Yh9jSg2pBllIP6qQbH73/VwUfU/W4v3/vP0D/j6z /Q6U+ip5R8WlCP+3BEX+BvU6VwHYdr4v9+mV1DVT+An3j5jcTcwnn0My/pMv4u/g9Z5wYf1n kaRFu+SSXeRpCwltVBozDMYz/o7F/cf670O02dz/q+NUXccYp2P3dvrT9SnrJNPwn2I9zn4P jdS7H5F3NFXuSS+kaUValSPecD/lyT1xf9Sev3zg2TofE0NymTY4m32QJCj96mJIHz7PeaNH Q80yfYFEvnPYvgcr2HOqL2n+WzY5/4n2NzieDY4/9j2Qf6Vez4mx0OpS/U8R5LZ868r2O91P c4riX1NRF6wH97S4322fIdg3HzO5T4bXxec4OJ4HiRKMp5PalFyRD3dL9bErDaqVjKKths5s N0kt6ovhfa9w4fgvP8bi8TyinbB/SvUW90PEwr3twnuGzTCU2GgtCmMUe2Fe357mPZlHWD1p Jfyzm6php1cAI0bPnONUXzHTYexEXYtH/S7jLbmg88u5fGHF8+h23lVFjk5YhyhoeYfgP2v6 mD7U2exuGFQ3Sq9w5n6PdlPueK8I4mHs+x2LhN2y/K6uF9o9JIXicmW8K61RbGGl9L8Exf3v U/W7HGdWV9B4Q6xTDrFN1WnyPYfGtqfziq/Btqr35ewAAAAAgAAAI2tAABFoAAItsAAEWAAC NAAAAAAABAAAAQAAEAABGwAARbAABGrUADfr6rW1cEEbPQjtENNzcwmmXtXbBona+5EW76Td 99XD7unyPDm2RF+CqLeDmE7V8ch6Bj1MKfgO4mXVzGnOXQ5rvP/k8XNdx2Hxn0HjbjpYe+bu plNLJ9r8dPBPqcu50e9sEeaRZ8FZKkZkSKSJT82GU+197/a2cn0XovNeHmaNHWKcC3HpbOGR DnVVYn9N+Q2O4eU+jO17n1mPgkl853WD0J85+d97xbtO9UXznytPpn3uT6W5X1p774HxRF8F yX7T3pDSD8k8F8TL9+/ryX+Grq6sl22l2TtLpLqaNFjGqmrR/5R1qi9HmjViyxallZltZlmV YijbWmUZYSZjMZkqXebH836e/XX7v8Tx+klEpIfw1QdIgm/heyxFyBenTZLsTsawJbsEOkiQ 9j578l7B9m2VVRRVFUmxxYLRYMDcQlyw3dtrjHbMjhKwLF4tMY1BzqcDdO6Sm5KZwzfw61M1 v0yOKO3ltzv5NNRyUUskV8F906ZntIkCANezueLeFKEhHxC90MJ7n9jydWrYnhcG+Es/NBGD CyyUW2btC0LFMssVhDLLpp4kbToLwKo8KeDoKFzRPcRvTCZmDiYbl/r3zGKxc0ZlZlmW19Uq IT4n3sfFcX68q/UOZfeZXGQehfwdegrv+Ripi1CZZo46WzTk6GJ+baeypflN57lUdiSWAY1m MsZk2ORPP7NPpUjz1oayizJxzMllhcjTBFkWyLTxVxq4YkzPhHKTKNCmX/gj8X4du9ObocEe +MhO0/1vsGJwSNsPVlahGU8Hwer+xkrDBhhWBXrgylQxXuR4pJbNnYe37VfBfNRaTzO2d9cV 29h9z+JWdX+LnpipP4KXsbObuw+ae0T1DEwzEIZpBhPhEUcgjiQ7N10u4UQut1dnbVde1S8r a/kY4EpwfV7Zzyg+hrj3Iy/++FciU+udD+pimYsxMvsTweD2vFq+doP6GU/9VHsMWr6yTFcy of+Lo6TzbseN5scCtGx5ZJe5THot6nELbKZtElxr1VNm3e+nq4qvrT4NJtPuXYtSd56VSurF UrK6WktLAXTCQ7tVLRWTaZRoYRDEwMLFI5S0h8MrZkzMyy/ebrZFW1YquZt2Fue82w2TteIm fRXH+gjc8akrhU4c8YyFqlNedi8lIbyj1PF9AXBckcCuSJci9rPB4rkleo7TuUzFFxykbDB2 HoRBzjwSLwcSz/hT7VaFRaRQP0SFdHikOzmk2FkKlJVDqownhc288szMxNhpERF8iWR8NXYV ykFW4NEplKk3Y8dQqoTk6I4QceLmxS7G1+8nYicbHZguRTsD9TXVEnxYOxVqqtVVVXorBljC 818GknfLcp5tvtr2MPOtheUqcTZgSZSJwQOGaqro6t8PBGsWMNzFSHlTuqlpasqWRNH+J3eT jPP8TUrvYVtYy1EWmwmOLc1T1a0tzLWpo0lhzeHiqsssyZZY0zGmYxjTMZfLkyZMmWSO3L8z Gxvo2YnF9U61OQn2GlOCyos+OINDi7HWjTTYtBitFUy44sJL1wWUwaKJXURTVknhdq1MvGWI kUWybKcTDdVSm3GEnqd0A/vdEiRrNPpjGM3OLMsnBHBz2QpRwTqVW57oT4GnDg1VTFVvMYZU 8CJHMxOjy/oUqyKof9ynoG7ix5UpHlmGMlDGYxOnvyQNGqVVVy2aRozHZWDMgh7jZgN6aKGh SISk0VMsiSWxtFs/NHtRyic1H4NK/lUsdKuTiqZnyLhq8FIidXq+Tg0iCY9dmTkyKNg1vMpZ UqmzaYZjLMwxZoskaSRJSNplkCimSUlkkoksaaxsRSopkklGKiZM1FIGZTTQqwpMTZbTJkll KlKXW28nq3lvW8mutNLKYpZL03VmmLMspZlZspkpZZZkUlmYxaa8XUlJZTJLzrXUtLLKUu63 ZZLJZSzc6kpfJdXUtmYpLNpPHrvLzJpiyVllpbp0klLxcbJJZXbtXZZLIbNLLLMszFkpSyWa ZMsizSyWbeXVuslvyqt2SyWb1100RZuluxjGMYxiNFkpMUyyRSlllmWSyWbNkqpTAdjc4k9i aFcLoUxcKsUYYxLMWYWB1G4T/sdiqpVOoIPtfccfB/A3nWrZVq+tYVbaq0vzvCJfmdkSY4yo epR5nyHKTVPKh6BYjvOQntMipiDCGSTKZTCgxVlR/pDD4Sr3ypSn9TDZ/aeMTaQ4Ku55tnRM 0Seq+Eq7ytqm9bXDGhTyOjueRp4uaPVc0yysdDpjg6m0ypZZQrx+GkmZWa1mVawWtaMy1ou4 3dk7jFWyfhap6zDkkxVfPO8rzVtgJby9t1mKrd8jHcbrJJ1hWNu9eDnHiU68jhXA0quCBwax mLLGjMFmJJZGitKWkMmqpLTEUywTPTq4KWlaQ4EJJGz8K+on23ie5XsdHwFsrSmgxjGJoUYV hWFGEYYZYTYqTCjLBGFDY3d3ifZWIeHW223OMW2225THi6qg7D2Z8s1rFahrWTUzEzI82Xxq 33ZYaLbJquwkSpImCxpME5mTiiPb03abKqopZysX8Me1TMqrOXrFNIy46HdhVccLgZW6OwTl 13JXk6+MO2TURyqWxHSUHxUiRtKPj1UravqJc3ptrMzMxyMdo0fBVMTBQqpFFLzhq5CZ0j3S LGZmHsP2FGCQERBBEREJBUcRBUVERCHc7YeR3MDcEnvwiZQ81KpVkshqjzKaM6nN5PBxZRoo lhEsSmq98+yxzD6YNZZ7g2WbaRI1KmCWIj6TXyy5GzDnBuYKts0TGOJiVpgl2KqY0wdgjdoZ N0LGCZ29mkyquCsLW6KmwdCJGE4pCsmCpwww1ti22KCCCAyEmCAFshRM0MFCBkQzBBICdc3M mm5mJqkN22ZtFOAoopSpjdsmuEyhY3aREascZg1bsRvltDG22oyySYNW7Xgw8jRtsrdrdM76 5SiaEN2JBhMZwkcDLbVvW3Em21lyI1EbbSTdKNpJEm1kwqactsXS4yuG+Yzdtd9dsTrW7K80 stc559aTdnXXLVxIUohQhnDQhpTkycNKFvC7nNLm5KS8vOuZTvm8valtvntllbunc07BeDTR ykOFbUstS6za2XlNm7KQpsSrsTZSENEOEtSy1LDbBMpTTk13SmGiuF00VdqrM210jGTjsHHN ImYhlMy4RJcIe04XSNzWguouCMJDQVSyJymaZIkfHGWmPF5PNZ767qlVMXI6aeRxSLVKuuR3 u3sen521sP03cJfNu4Pk3cAB1rpd0AAAAAAALdX4JIH1KSNVJH1ULJLbatqNlS25GowYxIYN oxrEAwodbqvmvm+Ovkvrt+fKLDMCsDJke61S0YmJk+B2SOBTeN3yfFRIkityx7gZwpbWEi1t t7/qBD4dO6bdL8Wtt+F8Zy1I1HuZcL1ZKWq900mZGZXNXqrCmVtap4HA5ESOpHFD9Qbyv0mQ vFwevn8V5OJ3qD0mXAl6GYZ3fOuJhjjKumPXSXaeC29qeI/L16RD1iZL8CJi5k3e7YXguyL1 JLrpOeEwatY6I02jR2H5K9VisMB71OCShytpy0yyqxmsL91nrr8EZakGpAr3k67Xreq3q19a LRPewpX4isKpCkmybnDpNEfApiW+i+q7SvV0osUUUU+6bzbMfsMRHLZ7Ha9J0ek4aPpe096k 4FqYacKQh0hmQmzDD2ksw0XppCEJcXCqUsq5znDDGWfSFz4nSOEcWer1W22276OQJzw5xiHC OUJweb549DLHI1e59HJ9zU5d7ENDDJiRJByEYIO99jTE3lRXwvmqdHY9bDd9vznJ2t2GGtZa s3kSz9rCem3KNCo5d8FNzc2cTITd1SflNuXidxyEic+LgSqKwVzObs0ZdzRo7tQ+9U6VvAtV OfGc3VqNUGzoMEdZukw1ciOhx89N9nxTXcy5NnJHF2w8UlFblSFELUBfgR8raAVLmCjB2OsD lrEFuAUo7KOjVh4U0YVVVlOGw5EnZHBUmWpWuDJSK4bR3kaO7JiWW2GE5GJVXR6jGneaXabG xwNUTRjCmHJpAosVQm5WBRic+3nNLG7xxJ4Y42Zhz8ccLbOdNa51xu1Q8cvAYc9sCEknwWWP s87ZvCvqr123WRvtI7tWJUSSrPYhR4BILsRcomrXhnl1FtDUsykkXGh71KWQyooq2FFwQYqy Kw0sYMPI/XFXbGMHrq2aiEiwRuks06OHRVVpTc8sOFJN8uDu3aUcqMWZROjDbPI3b0rUxhx5 5nk5GjabGFZRORVGnJyUq0dwnE4Oiw3ObR1OrZuPJIeXM5J1deNcrKGWTMypfxEwaMWhMB4M RdjlH6hMlKwTBWGCxGUmq2oX4f2F/4IMpF2I+Y4FHcP0L/UE7xfQ/dHqeCSA5I490R64fkPG i24trM0pyPlNyqcEbvCbO05OijmxiVKiqlUtCpVNONLGqfeRs0MYsbwm5ubmE8WnBiqOL3Mq ZYZjGytn0SfFSMpI35JE5TCRlLowjUrenwIxIMHhE+TB0K49IODWaVbEmzHiGLdcZVuSnfiT 5pV5ujwW67JYj4mUseMj+JvCJoJ0+n0nvy0h1ydST0Tg9yYTLNktJZWxHi1OuZ5ybdRSipE8 U7po5/ae5zJ2aOXi5HgbCTRY2PktK9L9osjVs4j7jTq9TlMJG5UiKzxqSVubwrSPKbCTCHTS P1qyTKudcQ8SiyRqxvlrZbJZ8LJDQ1zjX2abKli23OI43wd3sJwipfsdi+ZoUwnMaT4p59+7 4F/Dvm27aYMz5bmjcQnkRJ8EMP4yQvpJeUpDTaIkEhum00hcZcGVGmWi23SZyrLVoB+KuBwK Yxa1yX6w70MRYrFDmumJnbk0h9LUo5+63C2eC4zVEY9Tve58ep+TDVlHAMmuTR79Rk5KaNnC ZhGDwGxKZKYKpSmCowjBWUe4pSqVKsw4Yl2Pd5bcXwHN8UnM4Jqg5odGijCmFGEpVK5tYia8 9mKvfEZrNZucTSQZZqyjSZbtaszW9E4i2UNDZU7tcbuVPVPEnKch0aKXdhQ4s6L9i2XAqw3X ZXYLpVfiS9b15mZj10WI0xxY0w2RdE7mPHKpX7rtPDgHmv/FYwxaPP7Wkqxzdx8K/SRGPMT2 KLJTtmSJ3/Lv73Q1dnwbndoOhSTmnN7zsGeDhgeCEEDE04MkIHN8KuIiIjkE8eeYaaaMVUgi qqCRPVRYklxqBxLi81oV1sOnF12oOynRkcUbmp16qsVhiV+KKVMLIpaqlRSwVRET8HBWthTI 3qquuklcJHBMWBkSOxyc3K0w+jGMWraWSOiHGNZD3j4TodjN+jCeEpNaRpe9bNvlJk7VkNqx xQarTNWkd/VQdvqQciaDQcHRUnCSOjRJxkptVpbFzWWszCxiztX8i/QpD7veb3he0apyHz4t Kepjixpkd6t3ivRXxfe5vg8Xo9d8nya1P7DRqzZoc8eqN9TMMxrFakMExg2TVUnUR0vbs2Pp dbi28Nc6cJjhmWMbazT+D7mn/wrtiHa6/yvSLqNrR+3v9vY40XCvJThv4MK8VVcZHH7/g99j b8jXgfVXa2vsaNeUumjbavxj4RV5tXXOTrVfF4bkr8WSX6zJIcJS+jSdxh1MqHz4tr029Cbr 6sF3ql2vF9D6G7fuvKSFrbGNlXPAGmWMgJiZJB0YKq/1HdNzaYGdp2mM+RO3JPk0jkSJLRpK yC7ptBIJo0YSlgQShCyZkRDMPITIm6EZYbYt66ClaKklWJ3qDrrtwbq4FYqpcranUw4MTRlW GQilPCHNycYN/t16aSI8nNpxj3ldw+2MJpN06fU2n6JNiqpUfeaz3Z4dq2MvP6vk2+GttvF1 Sm61i+kqOR6JokaiXAvN73ueDeieJhmWzuPKyWjYVWTUzfWjZs0k2YNamYYK1arAUVhQRRJU RgrEQtNprl43MaNu7o0RtEVcY1ZZktmLuybxh7GzgVlbUmVN6U0jRtIfOw09/Myw0V7nFwr7 2VaZQsZUYRuwiGOZalWznkOIZHmtqnEOFRcnBi5PBvCuJJ8PhOQnFz+ptPwm9W5zbknHCnZY TbN+Gy7f+7hJ6PRwejsqq4bPvniIqRKisOeGqzNLZFljH9lTjfi5veMUp2McynlFE1eGY0VI akszypJV/C24mGIxLgTIcH7HZMyWDXEJt8PbJEj5+mlt6Y7/jxt20yyZwzJlhbassuWY80ei tiZF+JwBoR4MTix2z1K0vAn62zFP/dflPKr1vZgiuJzTIrmzc8hai4MJPYhOzr6hqSMpolqR s9ilCpAsi9ScWKGLeR6hSxwwcE2mpmLnFfbOE2VR/MA8DZPNZVaRV4tsp0ZQxhcxmnuy2VVa pMbPnFKmYZNEp+kljBMRgCZ6Ae1kFEkxRIQhYRGZc8jPQzIlyuvC917+exX2C+Vxe11aQ87J N8VhVVWMMKp5mZKmEwmEjCKwYKbaEyjVWCmjVD1MTO6QmJXL8t7ySSSSSSSSSSSSSSSZEhIS EgEgABlDLryp9kut5GpqJki0whjIpgZVhjWFY9iTKhmIlBGIDjYaKpSVowjFSfBxbJkGhU3V OOW8QpSZRg1rTJloiaSbH6NYM21SrJjiRgjFhvtcBNkxalNCJssquC54sMUWbqXDERzebRFc m2mxaVYxYq1zU2Ngu5seC9llH4MpbD/jWMTEnuU9m+O9mixtLOcSOHFGukRPYs4Pa2yrK1xp lh5XClttIMm32ve2q/c+XZu94H0+ufxvO8eed487194cPsu8rra+3aqiNbKVSylJJbaEkxMN klS2lMtmINqwWKmUZlq2WRlisBZ0d5zWnbUnr9aptyMUrtp1TxMn8zBU72ZPd4KXtYKwelTg Kc+Alw0nQ8XgxjdYVuzgaZR4CGphgDDAnSguieL4NJcRHlLj91DY+Jscyu5TzWfRW9Vb8ZXz 5mZl8bvcydrwiupNkwbXrCdovgPNNyZVGExydrsd7k2fVEl+J6lx0xsxYyq7ybP2tHHcn1Es DTHR0c/T0u9irHBVaYgbZtkFXqFzVJpcMUzUjdbKW1krsTpjNJ7trNTjWUZWQRmDjlTTKk8V THPnajJwnju+WScnaxzcHVvrn9rKcb/wusIODVhixImeSOhF0F7zi4KDGMNGK0ZlZUuOGUns M6CTleV1I5NkzrddDGbnQ0R/pkqWaGENkmjLgnArGvL4M6X7NmHTeEiRZELpvCAzKyFIO/yw mundFiRBhRxApAcuRYYQgUIQGKSkKEcutXFHEu5CTB2dp6eOvOrIy1qyMG1sjO/lh3Ox4KJ2 IZtbAtbDkLyEgSZJkIHChvBM3Usy1N1zx48zqnYScOJ0SkztQZ11nBpy2cm517NZ39Km6l0t DLD7Ei1JcLqjd1255z/lcXFXKSn0snHPzKryYxldtF896HvXESLid/7VNKu3Lelea8SsMMsG LCZz9tSn16ks7V3jBScDBsrSpJovPPrrmrokOD5WSi6N36jV8izczSSWlowhpkGsqW7WdOCf 0VOEpuqpuYlcDJ+txaDGCxiiv44ob2I6ZQ0atPyYemW5jt0lpPFbLU78Tt2kZMFLxfPttn5L 6C0YGJMFSyszC6sXgqX8+ySbNyQXT3nkH2PA5nANSqe9yv7W2se+9G+C8Ig4CJU7pZN773vx fhzKedtb4xERZSU/M5NawbTLZEjbak2rWc5LWkqUsIy2tJTnJqSYpWSiTJRbWSrZKZTZVsVt i22KxYtbErfcaMzMyy+SoWJaxSrDsqekXQlPlV1OCgx1aVhiMMMMVjB2mUO1d+r8KrK7Zwrd fOuS+eLO+8ZusJOjxqe3VjCQLE71ImMrbY1cN2sLffe1rWP9jHBTlHpnfUl14Z+ad6HdD0kG 8r5Y5XvhiV+eI97zwx8sYSvS+glg9h7fJsrjz3nY75VzaJTY0bZvlPu9vPEklzcl5dXQKkHl 1mmmWzW9LeskvYi7Dgqh2Hat4DrXYRVPNTpmZjLMWSPd/ETSeRO3ArO5VfcjHsj2PLMXea5u bo83BIcg9GHkejkkenJrN6hOnnhHmcmESbykSN3Gsc9bmWf3H+Nq3Emr1++0P6sPsSHrWrI+ LTIsZMZMZKseJX+A4vjr+/GMaZzblpH3PZoiqhU9hotLRS0v3DHtpxL15sa8o3JhuL5KxIYw MVf0NjLrf4PA0keCz3/W7u1dcSnSi4pyMPV0ehlOXFKd+Lyx7057HAJfuMQ7A6Dhak5nnw1E 7u5F+edylXPHtxi0NNDVNa1WLmvjN+qL5/Lq9pHtrkrrpbO60XK8l7S6V6kesrfbfFEm2spF x46FmEbqydmBVQ9RG0j7r8ZdNnerH1fVKS8pBupYql7CoerUK0cS6pmp9S9vP7XF4q6aT1xW 0cDydWXXRdzrwTUV1VG4itZPwk41NOKyhnPYn53ElqJO3EuDgqbOUNBjRoKrM2X+YTRHNlWg cKHQiGKHAEoGdhEgQOjTqBjxOA2NK4YrJulgYgwqYSwj4yxN0yxJtcbXE9++PpWLFacfu0aN NNNEk0qelGLKs45xM6YlrBs2aNE31TU0ECgOIgkopTivBI1UKIIglItkLHbUhLlDyO53O/Dh Mhd5ppu7unFFiJmYWACCacNNN3d03d3DSQJnkRyDGHFsxo0hNM42bMSZKq7UtwTnym8YJkVW Vu3K1JhodjGMNJTQpYYjkX6ZkOBXBxfRomomsS2S2JbLTt2xPRuUt9fiwfB6NPpMw2vk7XlU 3PYZS14LiKypiNFZwIqmRupNhdqNqHBcCUw0YJhEoioxVJahTDDAuBoNSai2MmxrFBVMzGMG oksPvLCU2KcNEtXBwrW61U1Y2VZoaLEYlG9Nml/Wwa90721XGn0C0JywwS2e59jat5xv+ZhP nxmwDePBhMCYVrEkjLElTLMYUdQeGjs2TS+lFzXhDgTvSXBiTi1pS7gulxj+97+SbOUh2nGq tCbWToKlwmwdtbe/1u7nLdxEW1Se5gPN+R4Dd9IlwrtL7nf4m9Q/Le36zuJE7tzumIclhSyq lSwwkieZRjMmJ9wmqaVIlJIrJVNiVil79cV8XNzXd1yNd3ovLleKOzWsMzVk1wbZWHpOjafm SWnRbByXFIvrNKHNsFbospU28Lf1qD6Z5XCnJHYSnPRfaoPF8na7m4qvjSvViXXGw+pLGPt1 jKmZwvcYW9VZXlfJNt9MkkmCSSSSSQJJCSSSSSSSSQkokkkkzJJJJJJCSSQJJJJCSSQkAADI SSSSSSSUySX5Mtqr2r9+9tefC991e2cxjF08rzXV112JSbytdzeXbr4zmLzrsYxg3V1uxXcz AuXKjjhIUpSlMzMjMAuCYhwmMKIIrJkgjjmTcDBYSFuu04kl13d3ddXV0Yp0kkukY8q87yLu 6dSukOrq6MHXXRi66S7EjpdddddI5JkSDhKsokIDKY0uOSHlSZdvK87uukukYwEYxhmGMY87 jGMYxRoj3qpw1ckkXBnMBYEklVESmS4XBA6urqDF11xp0uMXq88S8ypI44kcmOIiIiKk0olK RjMYSFEECUzCiUREpbbhmBSlxHEtKUpmEpRCUwwgyxJCQPLzzy666SzpduuujGMaO12upzjy tnMYiDQaDEow2zGMYwMY08dnS4REoTGSkEVCJByTtmiWZJkhEERDWqqqqqqqqSQgiId10l26 dIguuup5buZ5LpDOl1111112MYPJXm812zTCsMMMFsuI3cZpJHZwf8683HGuyHk1qWmixViq jC8Y1TKR83BXZ+9TGMfmY5ujr2X855EmpzD71Y8TwWG+2WYMsWisSvnG5TUsqMmLm2XZPsnr pMKq/tGCwYVYyYMLBiVvFMrm/oY5mbuwYymMkz4a3J1R3uzimwl/a/Pym8pLMe5IYyqWHhmo xHJw/EdV+VLlkvQS5jnWGWMMWRncB0E2sRYQxUmMMxp6ctoL9tIyST0Kd0UxJYMrizRYLGHD 12ttXxWvaW31i2332sRy6XSk1c7Lom6QWq7ZqbKupncy6dEREREum6mntcg3tKrfgyIdWFo5 p8THdH9LzJjBjE750irvrPUMvYvBYyF5bF4qMZlKd7K2mJyWRiMid5fJ5xVd8ZJs4k0fps8d YzH35q3cxO/plwT7DJilL1NU45F9eZrUYewkjmd/xwayHBKndJP414u3I3Ha2LkFkebEbslJ sYQZhR+H7/be9e1qy/HduwJLJUmAVVSsqdlZQlT+RIXhh6ojgaTzY4UmXuE4rTpJWdRTHznV o8TuZKmHPWao1iMlNmGUqdtOweSSKpT75IqMFPHxPbgjyvxdBq/WQ+j3QGCsmUdiUZPj8OQ8 nb8KARP1rV1SSrSVtdVK1aLGFgDFdF20eJeq5xvkWelsXv7XYU4xvcX5JjdDuy4Z61ymv3Y2 ZdXB7Hi7zLVXlb1T8TscnF6b3oZUPoWCGUxrB+V7/UrdvJuMJSxw69vfrtnXXYww3h8xua6a ovOZybwAx/S9gqK+sphnOHeC5HJHKHbN0pMzCBgdyZS6RJY9GjQoc1nmklgp0f0HmfRUwVGp Uj2MTBwgFb+FuFwrDHsjDnFi48z9q1UtVpms1aWrTgViWLKaK6xeJwk+PDXXQSQeDEvSXl5C cz7DtVOql3rhU/kL1ytYYVS/SFx0qdrw8ZsYdyu8c8PCd+oh2+st+9VLeXF2zfaW0q3LsDAh gkyJaDwr5cEOxzOCyG2P2XHpnOc5xjPGHSHYZhJN9bBM94achPNJHj3YrY1kcCmqE2RzCZTh FRJ86tWrVq7LWGFfJ2rGk5aXJ3LSqbqksHxjHedxi7zR3xdOF3yleBk62/pmZmbV4xzLkzJ+ 1icDsXtOm1LoS4bOAV2Fwg8Cn0jnJH2uEzp1SSVtPCmXoy1eGvxh6p2jtJkkdHR0dHnvwdGO 9o1ZhzGlNMbWGS1lZE0aUpPWX/2zwrNaSTW0m1M0apmatFGGWCw2jFhpqqx3YqaMS2xqjWxV hVTQptWKiy25LhswxbhCdBMhMxKpHBgYGTZJJIQhgGUne51o1SfFJ3p1pGSGGECYC42iuKr8 XL1vanpLPdO4IMXuo4OKIo7sTeBpQQUQWUqle6hhCTMIEwCTJk7ENEh263T1I8V5zbCTVJAg iEE3d3Vd2hfB4vRU0mQhy3wbVlvrnli45WWkSy3j3SS5RMsyCpTAmsaNUZTCgZJUMFIVtJEo TnVxbDXFxDRcCOEXXbrJXi/A4WYed+aziH52XpQjr23LBOjFwTsR14CY4Wqkrt33bKZUZnDs HWVYSMs5j4q14XVTEMCMJiyS0kqlmDkTRCVU9GExWKtkWUH1POp4vXQviFyqvXVUxjrUm7kp EjrIfskKnmbo7lOxQysYLyTB8DMPSLl2qWUxLLuryTJjVHqR7PHY8MtnWeEoxyKdhlC75Fzn pLgK8T1SrjcrHAwtGV4JlVO8xQ8mMpky7PPwZd+LwG5aYYxSzEwxJuxqUGINnhvSaV5dulU4 xMsWIWJYJpcScGGeEG7a5KVxNq9yXRxuQnA7Pe3llfDfFRqSpKSyaijGVmGZMYtKrzi3brY7 Y9JbyUyXMeCsCGqhZDRxCbjkIm1ZRS/IdiL1VD+LPXk6vbxNR6HN3MOh1iHq3W7zj/eMYrNR tg6EqKqqb6J3TjGeUeKvCSJqhp4oZon6mSTry0csonETklwa02VNcf074XtXqbbaS9pKa4RE ozGYYygwWaqpowS4TY6bTvudx4lo6Z6RjY0otKX0UZPnFxKr3uuXa2dsRfDo5l6dV0UHfMZZ dZa3LX5rr43lbvWuWjUVGTWYzJMxZizFDTDPCpfWkXLEhNju2YVor5G6t3d+ueNeLDjpkwf5 /6uZsqWZJTfhrsY6tPpe50/2/7v7+PWORKYdU5PdDJ7/R2ZbuDWduESH3Uvhh6JTgnFlrSJp 05Nm0plq2CZMLGhJsR4qqqqSas3o+ujokyxou8o4qzvoGWYSYbYTJ0VoKNWDWpk/2E/eEAzn ydOB2PYepxV0OcRXeOJ1wDPgCj6iqHZPjCJqmhaW1G7Ex5OTLQiVCyDwbtGiMJRNmxht8b+f beLXTGs6dfgC2RFOQQRMYRBOGgdHHdh0V8a9mIQ4JHTDmBiQxZBRwcUYHsgo4MQ4yIM7DGEJ IuwokyPhtytpk3hS4zMMM+3UYXRzh2RPBUh30XJdumzTdpsTSySQkh56FOENOaLiXZt2F2bu wUaJIQ8pnZtOjnCnbz7nOx0Jqm9OeguIQcNddu/j04+U5lpjtWJaSLC3sWLBiwZYphhyMFZR MpMSmJkkwjVhlgy2mk1YNYGjlUNNGDLEy2hWkaimIqKxbDBFlkUpvqSjmn2EpzO6kw5sLzOn LG/N2CdrlwhcfXU/UuwVoU4I7POyX05mZjDC8qJ4InciRmTZqYRSnwKalUpVJksmFI6UR3TQ JNervidSJVs7tVNjELe31q1qaGrNEPqYNJ7353jppo6rIGzEJqa1pWa1OSzrZdsstVLdZYkT Nj+k5sWQWZPR7VS8BW8dGTibWQv5BjzDicLavhKUyiiKIoiiJVpatVRVWr2HwwelPbDCHunA 9y2vyKLudilWOw3jY8iTV01NrOFj+Ckzx6vHYGsPUkJ4QqvJ71FiixK54GZAxhzWVnmnKI7/ ljjtCyS8JZjMZlGWJK1M/s1XaMVQ7zK+8lMH9eCtlDAxAxDjMFePO9a8O+sT6Y9P5XP2SXNF pdWPHNHGppVsBjmeFxfQmi0blSUptN8Gvp204R7og1E3h68XlZYLDMRimtHTrJdbxt7+InJN M2F/AaKraq8Dq0sTRoMXY3cVs3qlvi1FtovoxbYawTMswEt2PK7Ti1El5bG6yfo7ml4lYay4 lOHM2Tcw7GRpl0JcBT1nv4x3I3YMY+kw1MXJvtVVdPTp3+03jO6MfEJ+W+chLJOxU8lnOofx vzbJK5Rhtek/yfWJsk9hjkxZi9hsakNJl8RjzOgo2J5JTdyJFNz8Y1ETBls6PWlqLKzDQVBU lihY3WIPES0SnjbbY3PN6vN7nVokfDLtufOaslRRRUlEp73fXyTyaqww1IbGYkjg8mjV1XJg 0tqqxPvVsOZ13cXRjGnBXRcLXBTpowYrVXB034fRyx7xSlFHRwdjotLE49jTd9y4Fsx1VWjd dHQyE1Q0MQkzkd8xyatdU1NX2tcsieGU6ccOBg4pOSxOjUwMZYTFunfXLK705vL2pEQ1dVm7 GRkERH1DOju7DFjhHxzra9ZxIacNLkmmQ00dIFg06u9dQgxJFmGiXGRxHVrvisjs8srRA7JS rCxHLt488h7Z3NKWZBWXduzd2m5JkkmGmDdNNKbhu7um7u6Egnd8punRM3pMbNGWWrOzSaNZ crLcrmccAiZ1I3MuAnMow4OA4Z1i6fWSNITNDgbLWJFmSDs7vPdcX9iMet70TrXaW7wWJJcL i0YTGGMVjKUYqcDDkjCm7MbTRtHXDKmU9vzejJJJMMgS+FdVerV8artoqY6MQjAsr64jDRhG pUjBcpLgYi20hRgNRsROQlPBVOClpxEtOmNymJgxhjk0sC2Kb9W8+nNTzqNDBuLTyYmS02tL UoqNsxZra3q1UUWCdOw06uxtdTd5Ojd7GzRL0dioqKpaJpUp5RaqadUHiZUVHd4l1qyDIdxJ JJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJJLVkqqr9jE9JMxhKi1JCVZeXod 3V2h1CkLGrok0VZXnU/Op/Cpup3xjMmWdYLRiE5xuYXLZuJtPxavNfPNkqTZNk2SpNk3yUlP d0zmWSz1wj3Ztt/3YxW64tvDv0TpJPjzd7CUxwI75nl7leAuZQ3yexO4e1jvNLcXGG17uuOf F0JOiYlQ3RxYQ2bBs0tlWGzQrRMVowDEwxpGhoxWSmRjBhS0urJSsJCcRKDxLJJMVati2Vpa ciYlo00NFcDdd5N0zTMtt1k5OdLToVhVzJjMIifU25deZFxlJuYlhgsxUYphTCqior4Y8XZ1 fZJEk/Vd3QqMVcYN/gczn31HdkeLKsSpyL6pw1naeTmXLhOasp5kizk2LSWxFkpLojrbfkZs nnm8WKLgXgFckG1LvEbKWrcTKnLahOrZoxx8ne7HF6LFGxuZDVoMHkmrVZbac2skRlrxtsLM a8FCJUkSzEaT1Zw14XxcsWbNoX0MRfK6c5cu9dzjLa2T1GGxTZG82LdmMXUncMpXjaOa3Yp8 PTe1btXJ5uT2dZ4p/pT9h0EeoJHkjuiOsKiPgpgwYUqVQTU5e2sFNcpvcHZ4cPw42LmRVPHH 9pgrUpUrgMRDBIPGGVQz/U8/83f35ic0t3COs5Sd+Z4ntAzIeTwq2V7ih5VypPzJpYalLNr+ 0bE6LEp6kXcQ5y8l32rwLRlawr6hZ9B+NzVtbGVlgf7XFRYkxS1EXLIizyq0wwx5Zae9ruRY l2u9qxOBltLRqsTkYm0nyR3Obkt+zSxGqTiUuhkj62T5J95YLUush/oexOz3PW00k8Ni3jkn IxWGHup9ZMoexbJuYaSuNlS19WLmdhTjcN2li8p8KdHRzciexlxyq92GEDxD5WCG5enyk1Eh Bgmo5JMhLblhifRIF7uYkz0akSORgj1Q7zR2I4pfWTBzTSYLSwnXZssWE0wvYxdq4tNIbxyY VaIQ/OhDFyZZshLHKfDPVx7pinOc5znOaQZLQ219bxYsJacbxu+t4mGqZve9r3ver1e9jsOY 59LQaNXogeuoiYhqjsUsrrLwvSSNXi6vNTkHVrF2xF3WrFu5uvYS76jMonxlzM7yS/RkTkzJ EqsLUtblYVbEmU6ucN5rngI2T1h5w6DNg2zHCTq5uLu7vFPhomHIWpg7GD8k1nVe3t25o3Ll jFYLpp3eV9/412mxpMsqqq1J/MMs1atSYZSlCGhTMK+MxK1NmOxVy1cTjU1R6jBXFYHVei5l zd7vdCeK32N1fBWWLxTZPqEbvzKQPR6ueY4c2cuTmaqatJ6uQmGw5qYFVJxccIy4klcWzi10 St0qlYc2zLIqdeB0kjQcamTVJmbYrER00uWQZmjr0ypaljxsth1WaQhMTRKTM4TcLolJpRpk yDDl4dGkozo6KZSZzISNbLdpVGTXLSCEUhJSGlwpbS20spCFIdUEmC5oUhMzAPQ9DmeREfSf /h7Lbo7XZyviXY7/1ssZ8ZKwZOPG/nWUY8Kl/Z5o4uIYUzIssqrpqxs4RF6TMT5VU1hWIgWK Rxh6oOiwPIFIf6C/4WzIL5i8Av/F3JFOFCQnkiH5QA== --------------020804010101020205090300--

1 0

(ITS#5352) Global ACLs appended to olcdatabase={0}config when converting from slapd.conf
by rhafer＠suse.de 05 Feb '08

05 Feb '08

Full_Name: Ralf Haferkamp Version: HEAD, RE24 OS: URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (89.166.164.174) During the conversion from slapd.conf to back-config all global ACLs are appended to the olcDatabase={0}config Entry (additionally to the olcDatabase={-1}frontend Entry, where they belong). (Fix is on the way)

1 0

(ITS#5351) Contribution: PIM + text message (SMS) schema
by kari.mattsson＠trivore.com 04 Feb '08

04 Feb '08

Full_Name: Kari Mattsson Version: 2.3/2.4 OS: GNU/Linux URL: http://mysync.fi/contrib/sync4j-sif.schema Submission from: (NULL) (78.27.90.244) Sync4j Interchange Formats LDAP schema - sync4j-sif.schema The URL contains the schema. Chapter below is from Funambol, creator of SIF format, describing SIF. My purpose and motivation in creating this schema is to promote OpenLDAP as the primary data store for any OMA DS mobile device data synchronisation service. The Sync4j Interchange Format (SIF) is a way to represent PIM data coming from different clients in a common structure to make it easier information exchange. SIF format is based on a XML representation of PIM data. The goal we wanted to achieve with this representation (as opposed to other standards) is having a simple xml structure representing any possible PIM properties. The basic idea is that every PIM object (contact, calendar, and so on) has properties in the form name-value. Therefore, in a SIF document tags represent properties and tags content represent their values. We have a SIF representation for each type of PIM data. They are SIF-C for contacts, SIF-E for events, SIF-T for tasks and SIF-N for notes. There is also an additional SIF-SMS for text messages. This way text message data can be stored in LDAP. This schema is not endorsed/supported/promoted by Funambol, and I'm not affiliated with them either. This contribution is the original work of Kari Mattsson kari-dot-mattsson @ trivore-dot-com. This is not subject to any license of Trivore Corp.

1 0

Re: (ITS#5332) multimaster replication crash
by ghenry＠suretecsystems.com 04 Feb '08

04 Feb '08

> # compile openldap > ./configure > make This should be: ./configure make depend make make test (after of course copying you hacked test script). > > # prepare tests > cd tests > # replace original test > cp /download/test050-syncrepl-multimaster scripts/ > > # create input ldifs > mkdir scripts/data/ldifs/ > cd scripts/data/ldifs > # this will create several ldif files, each containing 1000 users > /download/usersldif2.py | split -l 20000 - > cd - > > # now run modified test: > ./run test050-syncrepl-multimaster > > # ... now wait and see ... > ... > Start gdb for: > PIDS: 13801 13814 13824 > Added: xaa in 76.78 s - OK (# of slapds: 3) > Added: xab in 129.22 s - OK (# of slapds: 3) > ./scripts/test050-syncrepl-multimaster: line 621: 13824 Segmenation > fault $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING >> $LOG3 2>&1 (wd: > ~/packages/BUILD/openldap-2.4.7/tests/testrun/con2) > Added: xac in 176.26 s - OK (# of slapds: 2) > At least one slapd died ... test failed > ./scripts/test050-syncrepl-multimaster: line 638: kill: (13824) - No > such process > > > As far as I can see there are 2 possible outcomes: > > (At least) one of the slapd processes crashes (see above), or it get's > caught in an endless loop (using up 100% CPU usage). > > Bye, > Marcel > > -- > ---- > Dipl.-Inf. Marcel Ritter > Linux/Novell > Regionales Rechenzentrum Erlangen > Tel: 09131 / 85-27808 > E-Mail: Marcel.Ritter(a)rrze.uni-erlangen.de > ---- > Unix _IS_ user friendly... It's just selective about who its friends are. > > > > --------------030505030300050004060200 > Content-Type: text/x-log; > name="configure.log" > Content-Transfer-Encoding: 7bit > Content-Disposition: inline; > filename="configure.log" > > Configuring OpenLDAP 2.4.7-Release ... > checking build system type... x86_64-unknown-linux-gnu > checking host system type... x86_64-unknown-linux-gnu > checking target system type... x86_64-unknown-linux-gnu > checking for a BSD-compatible install... /usr/bin/install -c > checking whether build environment is sane... yes > checking for gawk... gawk > checking whether make sets $(MAKE)... yes > checking configure arguments... done > checking for cc... cc > checking for ar... ar > checking for style of include used by make... GNU > checking for C compiler default output file name... a.out > checking whether the C compiler works... yes > checking whether we are cross compiling... no > checking for suffix of executables... > checking for suffix of object files... o > checking whether we are using the GNU C compiler... yes > checking whether cc accepts -g... yes > checking for cc option to accept ANSI C... none needed > checking dependency style of cc... none > checking for a sed that does not truncate output... /usr/bin/sed > checking for egrep... grep -E > checking for ld used by cc... /usr/x86_64-suse-linux/bin/ld > checking if the linker (/usr/x86_64-suse-linux/bin/ld) is GNU ld... yes > checking for /usr/x86_64-suse-linux/bin/ld option to reload object > files... -r > checking for BSD-compatible nm... /usr/bin/nm -B > checking whether ln -s works... yes > checking how to recognise dependent libraries... pass_all > checking how to run the C preprocessor... cc -E > checking for ANSI C header files... yes > checking for sys/types.h... yes > checking for sys/stat.h... yes > checking for stdlib.h... yes > checking for string.h... yes > checking for memory.h... yes > checking for strings.h... yes > checking for inttypes.h... yes > checking for stdint.h... yes > checking for unistd.h... yes > checking dlfcn.h usability... yes > checking dlfcn.h presence... yes > checking for dlfcn.h... yes > checking the maximum length of command line arguments... 32768 > checking command to parse /usr/bin/nm -B output from cc object... ok > checking for objdir... .libs > checking for ranlib... ranlib > checking for strip... strip > checking if cc static flag works... yes > checking if cc supports -fno-rtti -fno-exceptions... no > checking for cc option to produce PIC... -fPIC > checking if cc PIC flag -fPIC works... yes > checking if cc supports -c -o file.o... yes > checking whether the cc linker (/usr/x86_64-suse-linux/bin/ld -m > elf_x86_64) supports shared libraries... yes > checking whether -lc should be explicitly linked in... no > checking dynamic linker characteristics... GNU/Linux ld.so > checking how to hardcode library paths into programs... immediate > checking whether stripping libraries is possible... yes > checking for shl_load... no > checking for shl_load in -ldld... no > checking for dlopen... no > checking for dlopen in -ldl... yes > checking whether a program can dlopen itself... yes > checking whether a statically linked program can dlopen itself... yes > checking if libtool supports shared libraries... yes > checking whether to build shared libraries... yes > checking whether to build static libraries... yes > configure: creating libtool > checking how to run the C preprocessor... cc -E > checking for be_app in -lbe... no > checking whether we are using the GNU C compiler... (cached) yes > checking whether cc accepts -g... (cached) yes > checking for cc option to accept ANSI C... (cached) none needed > checking dependency style of cc... (cached) none > checking for cc depend flag... -M > checking for afopen in -ls... no > checking for EBCDIC... no > checking for ANSI C header files... yes > checking for dirent.h that defines DIR... yes > checking for library containing opendir... none required > checking for sys/wait.h that is POSIX.1 compatible... yes > checking whether termios.h defines TIOCGWINSZ... no > checking whether sys/ioctl.h defines TIOCGWINSZ... yes > checking arpa/inet.h usability... yes > checking arpa/inet.h presence... yes > checking for arpa/inet.h... yes > checking arpa/nameser.h usability... yes > checking arpa/nameser.h presence... yes > checking for arpa/nameser.h... yes > checking assert.h usability... yes > checking assert.h presence... yes > checking for assert.h... yes > checking bits/types.h usability... yes > checking bits/types.h presence... yes > checking for bits/types.h... yes > checking conio.h usability... no > checking conio.h presence... no > checking for conio.h... no > checking crypt.h usability... yes > checking crypt.h presence... yes > checking for crypt.h... yes > checking direct.h usability... no > checking direct.h presence... no > checking for direct.h... no > checking errno.h usability... yes > checking errno.h presence... yes > checking for errno.h... yes > checking fcntl.h usability... yes > checking fcntl.h presence... yes > checking for fcntl.h... yes > checking filio.h usability... no > checking filio.h presence... no > checking for filio.h... no > checking getopt.h usability... yes > checking getopt.h presence... yes > checking for getopt.h... yes > checking grp.h usability... yes > checking grp.h presence... yes > checking for grp.h... yes > checking io.h usability... no > checking io.h presence... no > checking for io.h... no > checking libutil.h usability... no > checking libutil.h presence... no > checking for libutil.h... no > checking limits.h usability... yes > checking limits.h presence... yes > checking for limits.h... yes > checking locale.h usability... yes > checking locale.h presence... yes > checking for locale.h... yes > checking malloc.h usability... yes > checking malloc.h presence... yes > checking for malloc.h... yes > checking for memory.h... (cached) yes > checking psap.h usability... no > checking psap.h presence... no > checking for psap.h... no > checking pwd.h usability... yes > checking pwd.h presence... yes > checking for pwd.h... yes > checking process.h usability... no > checking process.h presence... no > checking for process.h... no > checking sgtty.h usability... yes > checking sgtty.h presence... yes > checking for sgtty.h... yes > checking shadow.h usability... yes > checking shadow.h presence... yes > checking for shadow.h... yes > checking stddef.h usability... yes > checking stddef.h presence... yes > checking for stddef.h... yes > checking for string.h... (cached) yes > checking for strings.h... (cached) yes > checking sysexits.h usability... yes > checking sysexits.h presence... yes > checking for sysexits.h... yes > checking sys/file.h usability... yes > checking sys/file.h presence... yes > checking for sys/file.h... yes > checking sys/filio.h usability... no > checking sys/filio.h presence... no > checking for sys/filio.h... no > checking sys/fstyp.h usability... no > checking sys/fstyp.h presence... no > checking for sys/fstyp.h... no > checking sys/errno.h usability... yes > checking sys/errno.h presence... yes > checking for sys/errno.h... yes > checking sys/ioctl.h usability... yes > checking sys/ioctl.h presence... yes > checking for sys/ioctl.h... yes > checking sys/param.h usability... yes > checking sys/param.h presence... yes > checking for sys/param.h... yes > checking sys/privgrp.h usability... no > checking sys/privgrp.h presence... no > checking for sys/privgrp.h... no > checking sys/resource.h usability... yes > checking sys/resource.h presence... yes > checking for sys/resource.h... yes > checking sys/select.h usability... yes > checking sys/select.h presence... yes > checking for sys/select.h... yes > checking sys/socket.h usability... yes > checking sys/socket.h presence... yes > checking for sys/socket.h... yes > checking for sys/stat.h... (cached) yes > checking sys/syslog.h usability... yes > checking sys/syslog.h presence... yes > checking for sys/syslog.h... yes > checking sys/time.h usability... yes > checking sys/time.h presence... yes > checking for sys/time.h... yes > checking for sys/types.h... (cached) yes > checking sys/uio.h usability... yes > checking sys/uio.h presence... yes > checking for sys/uio.h... yes > checking sys/vmount.h usability... no > checking sys/vmount.h presence... no > checking for sys/vmount.h... no > checking syslog.h usability... yes > checking syslog.h presence... yes > checking for syslog.h... yes > checking termios.h usability... yes > checking termios.h presence... yes > checking for termios.h... yes > checking for unistd.h... (cached) yes > checking utime.h usability... yes > checking utime.h presence... yes > checking for utime.h... yes > checking for resolv.h... yes > checking for netinet/tcp.h... yes > checking for sys/ucred.h... no > checking for sigaction... yes > checking for sigset... yes > checking for socket... yes > checking for select... yes > checking for sys/select.h... (cached) yes > checking for sys/socket.h... (cached) yes > checking types of arguments for select... int,fd_set *,struct timeval * > checking for poll... yes > checking poll.h usability... yes > checking poll.h presence... yes > checking for poll.h... yes > checking sys/poll.h usability... yes > checking sys/poll.h presence... yes > checking for sys/poll.h... yes > checking sys/epoll.h usability... yes > checking sys/epoll.h presence... yes > checking for sys/epoll.h... yes > checking for epoll system call... yes > checking sys/devpoll.h usability... no > checking sys/devpoll.h presence... no > checking for sys/devpoll.h... no > checking declaration of sys_errlist... yes > checking for strerror... yes > checking for strerror_r... yes > checking non-posix strerror_r... no > checking for regex.h... yes > checking for library containing regfree... none required > checking for compatible POSIX regex... yes > checking sys/uuid.h usability... no > checking sys/uuid.h presence... no > checking for sys/uuid.h... no > checking uuid/uuid.h usability... yes > checking uuid/uuid.h presence... yes > checking for uuid/uuid.h... yes > checking for library containing uuid_generate... -luuid > checking for resolver link (default)... no > checking for resolver link (-lresolv)... yes > checking for hstrerror... yes > checking for getaddrinfo... yes > checking for getnameinfo... yes > checking for gai_strerror... yes > checking for inet_ntop... yes > checking INET6_ADDRSTRLEN... yes > checking struct sockaddr_storage... yes > checking sys/un.h usability... yes > checking sys/un.h presence... yes > checking for sys/un.h... yes > checking openssl/ssl.h usability... yes > checking openssl/ssl.h presence... yes > checking for openssl/ssl.h... yes > checking for SSL_library_init in -lssl... yes > checking OpenSSL library version (CRL checking capability)... yes > checking for _beginthread... no > checking pthread.h usability... yes > checking pthread.h presence... yes > checking for pthread.h... yes > checking POSIX thread version... 10 > checking for LinuxThreads pthread.h... no > checking for GNU Pth pthread.h... no > checking sched.h usability... yes > checking sched.h presence... yes > checking for sched.h... yes > checking for pthread_create in default libraries... no > checking for pthread link with -kthread... no > checking for pthread link with -pthread... yes > checking for sched_yield... yes > checking for pthread_yield... yes > checking for thr_yield... no > checking for pthread_kill... yes > checking for pthread_rwlock_destroy with <pthread.h>... yes > checking for pthread_detach with <pthread.h>... yes > checking for pthread_setconcurrency... yes > checking for pthread_getconcurrency... yes > checking for thr_setconcurrency... no > checking for thr_getconcurrency... no > checking for pthread_kill_other_threads_np... no > checking for LinuxThreads implementation... no > checking for LinuxThreads consistency... no > checking if pthread_create() works... yes > checking if select yields when using pthreads... yes > checking for thread specific errno... yes > checking for thread specific h_errno... yes > checking for ctime_r... yes > checking for gethostbyname_r... yes > checking for gethostbyaddr_r... yes > checking number of arguments of ctime_r... 2 > checking number of arguments of gethostbyname_r... 6 > checking number of arguments of gethostbyaddr_r... 8 > checking db.h usability... yes > checking db.h presence... yes > checking for db.h... yes > checking for Berkeley DB major version... 4 > checking for Berkeley DB minor version... 5 > checking for Berkeley DB link (-ldb-4.5)... yes > checking for Berkeley DB version match... yes > checking for Berkeley DB thread support... yes > checking Berkeley DB version for BDB/HDB backends... yes > checking for openlog... yes > checking unicode/utypes.h usability... no > checking unicode/utypes.h presence... no > checking for unicode/utypes.h... no > configure: WARNING: ICU not available > checking sasl/sasl.h usability... yes > checking sasl/sasl.h presence... yes > checking for sasl/sasl.h... yes > checking sasl.h usability... no > checking sasl.h presence... no > checking for sasl.h... no > checking for sasl_client_init in -lsasl2... yes > checking Cyrus SASL library version... yes > checking for sasl_version... yes > checking fetch(3) library... no > checking for setproctitle... no > checking for setproctitle in -lutil... no > checking for mode_t... yes > checking for off_t... yes > checking for pid_t... yes > checking for ssize_t... yes > checking for caddr_t... yes > checking for size_t... yes > checking for long long... yes > checking for ptrdiff_t... yes > checking for socklen_t... yes > checking the type of arg 3 to accept()... socklen_t * > checking return type of signal handlers... void > checking for sig_atomic_t... yes > checking for uid_t in sys/types.h... yes > checking whether time.h and sys/time.h may both be included... yes > checking whether struct tm is in sys/time.h or time.h... time.h > checking for struct stat.st_blksize... yes > checking for struct passwd.pw_gecos... yes > checking for struct passwd.pw_passwd... yes > checking if toupper() requires islower()... no > checking for an ANSI C-conforming const... yes > checking if compiler understands volatile... yes > checking whether byte ordering is bigendian... no > checking for short... yes > checking size of short... 2 > checking for int... yes > checking size of int... 4 > checking for long... yes > checking size of long... 8 > checking for long long... (cached) yes > checking size of long long... 8 > checking for wchar_t... yes > checking size of wchar_t... 4 > checking for working memcmp... yes > checking for strftime... yes > checking for inet_aton()... yes > checking for _spawnlp... no > checking for _snprintf... no > checking for _vsnprintf... no > checking for vprintf... yes > checking for _doprnt... no > checking for snprintf... yes > checking for vsnprintf... yes > checking for bcopy... yes > checking for closesocket... no > checking for chroot... yes > checking for endgrent... yes > checking for endpwent... yes > checking for fcntl... yes > checking for flock... yes > checking for fstat... yes > checking for getdtablesize... yes > checking for getgrgid... yes > checking for gethostname... yes > checking for getpass... yes > checking for getpassphrase... no > checking for getpwuid... yes > checking for getpwnam... yes > checking for getspnam... yes > checking for gettimeofday... yes > checking for initgroups... yes > checking for inet_ntoa_b... no > checking for ioctl... yes > checking for lockf... yes > checking for memcpy... yes > checking for memmove... yes > checking for memrchr... yes > checking for mkstemp... yes > checking for mktemp... yes > checking for pipe... yes > checking for read... yes > checking for recv... yes > checking for recvfrom... yes > checking for setpwfile... no > checking for setgid... yes > checking for setegid... yes > checking for setsid... yes > checking for setuid... yes > checking for seteuid... yes > checking for signal... yes > checking for strdup... yes > checking for strpbrk... yes > checking for strrchr... yes > checking for strsep... yes > checking for strstr... yes > checking for strtol... yes > checking for strtoul... yes > checking for strtoq... yes > checking for strtouq... yes > checking for strtoll... yes > checking for strspn... yes > checking for sysconf... yes > checking for waitpid... yes > checking for wait4... yes > checking for write... yes > checking for send... yes > checking for sendmsg... yes > checking for sendto... yes > checking for getopt... yes > checking for getpeereid... no > checking for getpeerucred... no > checking for struct msghdr.msg_accrightslen... no > checking for struct msghdr.msg_control... yes > checking for struct stat.st_fstype... no > checking for struct stat.st_vfstype... no > configure: creating ./config.status > config.status: creating Makefile > config.status: creating doc/Makefile > config.status: creating doc/man/Makefile > config.status: creating doc/man/man1/Makefile > config.status: creating doc/man/man3/Makefile > config.status: creating doc/man/man5/Makefile > config.status: creating doc/man/man8/Makefile > config.status: creating clients/Makefile > config.status: creating clients/tools/Makefile > config.status: creating include/Makefile > config.status: creating libraries/Makefile > config.status: creating libraries/liblber/Makefile > config.status: creating libraries/libldap/Makefile > config.status: creating libraries/libldap_r/Makefile > config.status: creating libraries/liblunicode/Makefile > config.status: creating libraries/liblutil/Makefile > config.status: creating libraries/librewrite/Makefile > config.status: creating servers/Makefile > config.status: creating servers/slapd/Makefile > config.status: creating servers/slapd/back-bdb/Makefile > config.status: creating servers/slapd/back-dnssrv/Makefile > config.status: creating servers/slapd/back-hdb/Makefile > config.status: creating servers/slapd/back-ldap/Makefile > config.status: creating servers/slapd/back-ldif/Makefile > config.status: creating servers/slapd/back-meta/Makefile > config.status: creating servers/slapd/back-monitor/Makefile > config.status: creating servers/slapd/back-null/Makefile > config.status: creating servers/slapd/back-passwd/Makefile > config.status: creating servers/slapd/back-perl/Makefile > config.status: creating servers/slapd/back-relay/Makefile > config.status: creating servers/slapd/back-shell/Makefile > config.status: creating servers/slapd/back-sql/Makefile > config.status: creating servers/slapd/shell-backends/Makefile > config.status: creating servers/slapd/slapi/Makefile > config.status: creating servers/slapd/overlays/Makefile > config.status: creating tests/Makefile > config.status: creating tests/run > config.status: creating tests/progs/Makefile > config.status: creating include/portable.h > config.status: creating include/ldap_features.h > config.status: creating include/lber_types.h > config.status: executing depfiles commands > config.status: executing default commands > Making servers/slapd/backends.c > Add config ... > Add ldif ... > Add monitor ... > Add bdb ... > Add hdb ... > Add relay ... > Making servers/slapd/overlays/statover.c > Add seqmod ... > Add syncprov ... > Please run "make depend" to build dependencies > > --------------030505030300050004060200 > Content-Type: text/x-python; > name="usersldif2.py" > Content-Transfer-Encoding: 7bit > Content-Disposition: inline; > filename="usersldif2.py" > > #!/usr/bin/env python > > import string > import sys > > uids=[] > > for lineno in xrange(0,100000): > > print """dn: uid=test%(lineno)s,ou=People,dc=example,dc=com > objectClass: top > objectClass: posixAccount > objectClass: shadowAccount > objectClass: inetOrgPerson > cn: User %(lineno)s > gecos: User %(lineno)s > gidNumber: %(lineno)s > homeDirectory: /home/test%(lineno)s > loginShell: /bin/bash > shadowInactive: -1 > shadowLastChange: 12570 > shadowMax: 99999 > shadowMin: 0 > shadowWarning: 7 > sn: test%(lineno)s > uid: test%(lineno)s > uidNumber: %(lineno)s > userPassword: {crypt}WNu26PDD.aYC. > """ % { 'lineno': lineno } > > --------------030505030300050004060200 > Content-Type: text/plain; > name="test050-syncrepl-multimaster" > Content-Transfer-Encoding: 7bit > Content-Disposition: inline; > filename="test050-syncrepl-multimaster" > > #! /bin/sh > # $OpenLDAP: pkg/ldap/tests/scripts/test050-syncrepl-multimaster,v 1.7 > 2008/01/07 23:20:17 kurt Exp $ > ## This work is part of OpenLDAP Software <http://www.openldap.org/>. > ## > ## Copyright 1998-2008 The OpenLDAP Foundation. > ## All rights reserved. > ## > ## Redistribution and use in source and binary forms, with or without > ## modification, are permitted only as authorized by the OpenLDAP > ## Public License. > ## > ## A copy of this license is available in the file LICENSE in the > ## top-level directory of the distribution or, alternatively, at > ## <http://www.OpenLDAP.org/license.html>. > > echo "running defines.sh" > . $SRCDIR/scripts/defines.sh > > if test $SYNCPROV = syncprovno; then > echo "Syncrepl provider overlay not available, test skipped" > exit 0 > fi > > PRODIR=$TESTDIR/pro > CONDIR=$TESTDIR/con > CONDIR2=$TESTDIR/con2 > DBPRO=$PRODIR/db > DBCON=$CONDIR/db > DBCON2=$CONDIR2/db > CFPRO=$PRODIR/slapd.d > CFCON=$CONDIR/slapd.d > CFCON2=$CONDIR2/slapd.d > > mkdir -p $TESTDIR $PRODIR $CONDIR $CONDIR2 $DBPRO $DBCON $DBCON2 $CFPRO > $CFCON $CFCON2 > > $SLAPPASSWD -g -n >$CONFIGPWF > > # > # Test replication of dynamic config: > # - start producer > # - start consumer > # - start consumer2 > # - configure over ldap > # - populate over ldap > # - configure syncrepl over ldap > # - retrieve database over ldap and compare against expected results > # > > echo "Initializing server configurations..." > $SLAPADD -F $CFCON2 -n 0 <<EOF > dn: cn=config > objectClass: olcGlobal > cn: config > olcServerID: 3 > > dn: olcDatabase={0}config,cn=config > objectClass: olcDatabaseConfig > olcDatabase: {0}config > olcRootPW:< file://$CONFIGPWF > EOF > > $SLAPADD -F $CFCON -n 0 <<EOF > dn: cn=config > objectClass: olcGlobal > cn: config > olcServerID: 2 > > dn: olcDatabase={0}config,cn=config > objectClass: olcDatabaseConfig > olcDatabase: {0}config > olcRootPW:< file://$CONFIGPWF > EOF > > $SLAPADD -F $CFPRO -n 0 <<EOF > dn: cn=config > objectClass: olcGlobal > cn: config > olcServerID: 1 > > dn: olcDatabase={0}config,cn=config > objectClass: olcDatabaseConfig > olcDatabase: {0}config > olcRootPW:< file://$CONFIGPWF > EOF > > echo "Starting producer slapd on TCP/IP port $PORT1..." > cd $PRODIR > $SLAPD -F slapd.d -h $URI1 -d $LVL $TIMING > $LOG1 2>&1 & > PID=$! > if test $WAIT != 0 ; then > echo PID $PID > read foo > fi > KILLPIDS="$PID" > cd $TESTWD > > sleep 1 > > echo "Using ldapsearch to check that producer slapd is running..." > for i in 0 1 2 3 4 5; do > $LDAPSEARCH -s base -b "" -H $URI1 \ > 'objectclass=*' > /dev/null 2>&1 > RC=$? > if test $RC = 0 ; then > break > fi > echo "Waiting 5 seconds for slapd to start..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Inserting syncprov overlay on producer..." > if [ "$SYNCPROV" = syncprovmod ]; then > $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF > $TESTOUT 2>&1 > dn: cn=module,cn=config > objectClass: olcModuleList > cn: module > olcModulePath: ../../../servers/slapd/overlays > olcModuleLoad: syncprov.la > EOF > RC=$? > if test $RC != 0 ; then > echo "ldapadd failed for moduleLoad ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > fi > # > # Note that we configure a timeout here; it's possible for both > # servers to attempt to bind to each other while a modify to > # cn=config is in progress. When the modify pauses the thread pool > # neither server will progress. The timeout will drop the syncrepl > # attempt and allow the modifies to complete. > # > read CONFIGPW < $CONFIGPWF > $LDAPMODIFY -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >> $TESTOUT 2>&1 > dn: cn=config > changetype: modify > replace: olcServerID > olcServerID: 1 $URI1 > olcServerID: 2 $URI2 > olcServerID: 3 $URI3 > > dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config > changetype: add > objectClass: olcOverlayConfig > objectClass: olcSyncProvConfig > olcOverlay: syncprov > > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcSyncRepl > olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > - > add: olcMirrorMode > olcMirrorMode: TRUE > EOF > RC=$? > if test $RC != 0 ; then > echo "ldapmodify failed for syncrepl config ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Starting consumer slapd on TCP/IP port $PORT2..." > cd $CONDIR > $SLAPD -F ./slapd.d -h $URI2 -d $LVL $TIMING > $LOG2 2>&1 & > SLAVEPID=$! > if test $WAIT != 0 ; then > echo SLAVEPID $SLAVEPID > read foo > fi > KILLPIDS="$KILLPIDS $SLAVEPID" > cd $TESTWD > > sleep 1 > > echo "Using ldapsearch to check that consumer slapd is running..." > for i in 0 1 2 3 4 5; do > $LDAPSEARCH -s base -b "" -H $URI2 \ > 'objectclass=*' > /dev/null 2>&1 > RC=$? > if test $RC = 0 ; then > break > fi > echo "Waiting 5 seconds for slapd to start..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Configuring syncrepl on consumer..." > $LDAPMODIFY -D cn=config -H $URI2 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcSyncRepl > olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > - > add: olcMirrorMode > olcMirrorMode: TRUE > EOF > > echo "Starting consumer2 slapd on TCP/IP port $PORT3..." > cd $CONDIR2 > $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING > $LOG3 2>&1 & > SLAVE2PID=$! > if test $WAIT != 0 ; then > echo SLAVE2PID $SLAVE2PID > read foo > fi > KILLPIDS="$KILLPIDS $SLAVE2PID" > cd $TESTWD > > sleep 1 > > echo "Using ldapsearch to check that consumer2 slapd is running..." > for i in 0 1 2 3 4 5; do > $LDAPSEARCH -s base -b "" -H $URI3 \ > 'objectclass=*' > /dev/null 2>&1 > RC=$? > if test $RC = 0 ; then > break > fi > echo "Waiting 5 seconds for slapd to start..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Configuring syncrepl on consumer2..." > $LDAPMODIFY -D cn=config -H $URI3 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 > dn: olcDatabase={0}config,cn=config > changetype: modify > add: olcSyncRepl > olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple > credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist > retry="5 5 300 5" timeout=1 > - > add: olcMirrorMode > olcMirrorMode: TRUE > EOF > > echo "Adding schema and databases on producer..." > $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 > include: file://$ABS_SCHEMADIR/core.ldif > > include: file://$ABS_SCHEMADIR/cosine.ldif > > include: file://$ABS_SCHEMADIR/inetorgperson.ldif > > include: file://$ABS_SCHEMADIR/openldap.ldif > > include: file://$ABS_SCHEMADIR/nis.ldif > EOF > RC=$? > if test $RC != 0 ; then > echo "ldapadd failed for schema config ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > if [ "$BACKENDTYPE" = mod ]; then > $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 > dn: cn=module,cn=config > objectClass: olcModuleList > cn: module > olcModulePath: ../../../servers/slapd/back-$BACKEND > olcModuleLoad: back_$BACKEND.la > EOF > RC=$? > if test $RC != 0 ; then > echo "ldapadd failed for backend config ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > fi > > $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 > dn: olcDatabase={1}$BACKEND,cn=config > objectClass: olcDatabaseConfig > objectClass: olc${BACKEND}Config > olcDatabase: {1}$BACKEND > olcSuffix: $BASEDN > olcDbDirectory: ./db > olcRootDN: $MANAGERDN > olcRootPW: $PASSWD > olcSyncRepl: rid=004 provider=$URI1 binddn="$MANAGERDN" bindmethod=simple > credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly > interval=00:00:00:10 retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=005 provider=$URI2 binddn="$MANAGERDN" bindmethod=simple > credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly > interval=00:00:00:10 retry="5 5 300 5" timeout=1 > olcSyncRepl: rid=006 provider=$URI3 binddn="$MANAGERDN" bindmethod=simple > credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly > interval=00:00:00:10 retry="5 5 300 5" timeout=1 > olcMirrorMode: TRUE > > dn: olcOverlay=syncprov,olcDatabase={1}${BACKEND},cn=config > changetype: add > objectClass: olcOverlayConfig > objectClass: olcSyncProvConfig > olcOverlay: syncprov > EOF > RC=$? > if test $RC != 0 ; then > echo "ldapadd failed for database config ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapadd to populate producer..." > $LDAPADD -D "$MANAGERDN" -H $URI1 -w $PASSWD -f $LDIFORDERED \ > >> $TESTOUT 2>&1 > RC=$? > if test $RC != 0 ; then > echo "ldapadd failed for database config ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > SLEEP=20 > echo "Waiting $SLEEP seconds for syncrepl to receive changes..." > sleep $SLEEP > > echo "Using ldapsearch to check that syncrepl received database > changes..." > RC=32 > for i in 0 1 2 3 4 5; do > RESULT=`$LDAPSEARCH -H $URI2 \ > -s base -b "cn=Ursula Hampster,ou=Alumni > Association,ou=People,dc=example,dc=com" \ > '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'` > if test "x$RESULT" = "xOK" ; then > RC=0 > break > fi > echo "Waiting 5 seconds for syncrepl to receive changes..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapsearch to check that syncrepl received database changes on > consumer2..." > RC=32 > for i in 0 1 2 3 4 5; do > RESULT=`$LDAPSEARCH -H $URI3 \ > -s base -b "cn=Ursula Hampster,ou=Alumni > Association,ou=People,dc=example,dc=com" \ > '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'` > if test "x$RESULT" = "xOK" ; then > RC=0 > break > fi > echo "Waiting 5 seconds for syncrepl to receive changes..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapsearch to read config from the producer..." > $LDAPSEARCH -b cn=config -D cn=config -H $URI1 -y $CONFIGPWF \ > 'objectclass=*' > $MASTEROUT 2>&1 > RC=$? > > if test $RC != 0 ; then > echo "ldapsearch failed at producer ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapsearch to read config from the consumer..." > $LDAPSEARCH -b cn=config -D cn=config -H $URI2 -y $CONFIGPWF \ > 'objectclass=*' > $SLAVEOUT 2>&1 > RC=$? > > if test $RC != 0 ; then > echo "ldapsearch failed at consumer ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapsearch to read config from consumer2..." > $LDAPSEARCH -b cn=config -D cn=config -H $URI3 -y $CONFIGPWF \ > 'objectclass=*' > $SLAVE2OUT 2>&1 > RC=$? > > if test $RC != 0 ; then > echo "ldapsearch failed at consumer2 ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Filtering producer results..." > . $LDIFFILTER < $MASTEROUT > $MASTERFLT > echo "Filtering consumer results..." > . $LDIFFILTER < $SLAVEOUT > $SLAVEFLT > echo "Filtering consumer2 results..." > . $LDIFFILTER < $SLAVE2OUT > $SLAVE2FLT > > echo "Comparing retrieved configs from producer and consumer..." > $CMP $MASTERFLT $SLAVEFLT > $CMPOUT > > if test $? != 0 ; then > echo "test failed - producer and consumer configs differ" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit 1 > fi > > echo "Comparing retrieved configs from producer and consumer2..." > $CMP $MASTERFLT $SLAVE2FLT > $CMPOUT > > if test $? != 0 ; then > echo "test failed - producer and consumer2 configs differ" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit 1 > fi > > echo "Using ldapsearch to read all the entries from the producer..." > $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI1 -w $PASSWD \ > 'objectclass=*' > $MASTEROUT 2>&1 > RC=$? > > if test $RC != 0 ; then > echo "ldapsearch failed at producer ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapsearch to read all the entries from the consumer..." > $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI2 -w $PASSWD \ > 'objectclass=*' > $SLAVEOUT 2>&1 > RC=$? > > if test $RC != 0 ; then > echo "ldapsearch failed at consumer ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Using ldapsearch to read all the entries from the consumer2..." > $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI3 -w $PASSWD \ > 'objectclass=*' > $SLAVE2OUT 2>&1 > RC=$? > > if test $RC != 0 ; then > echo "ldapsearch failed at consumer2 ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > > test $KILLSERVERS != no && kill -HUP $KILLPIDS > > echo "Filtering producer results..." > . $LDIFFILTER < $MASTEROUT > $MASTERFLT > echo "Filtering consumer results..." > . $LDIFFILTER < $SLAVEOUT > $SLAVEFLT > echo "Filtering consumer2 results..." > . $LDIFFILTER < $SLAVE2OUT > $SLAVE2FLT > > echo "Comparing retrieved entries from producer and consumer..." > $CMP $MASTERFLT $SLAVEFLT > $CMPOUT > > if test $? != 0 ; then > echo "test failed - producer and consumer databases differ" > exit 1 > fi > > echo "Comparing retrieved entries from producer and consumer2..." > $CMP $MASTERFLT $SLAVE2FLT > $CMPOUT > > if test $? != 0 ; then > echo "test failed - producer and consumer2 databases differ" > exit 1 > fi > > test $KILLSERVERS != no && wait > > echo "Restarting servers..." > echo "Starting producer slapd on TCP/IP port $PORT1..." > cd $PRODIR > echo "======================= RESTART =======================" >> $LOG1 > $SLAPD -F ./slapd.d -h $URI1 -d $LVL $TIMING >> $LOG1 2>&1 & > PID=$! > if test $WAIT != 0 ; then > echo PID $PID > read foo > fi > KILLPIDS="$PID" > cd $TESTWD > echo "Using ldapsearch to check that producer slapd is running..." > for i in 0 1 2 3 4 5; do > $LDAPSEARCH -s base -b "" -H $URI1 \ > 'objectclass=*' > /dev/null 2>&1 > RC=$? > if test $RC = 0 ; then > break > fi > echo "Waiting 5 seconds for slapd to start..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > #exit 0 > echo "Starting consumer slapd on TCP/IP port $PORT2..." > cd $CONDIR > echo "======================= RESTART =======================" >> $LOG2 > $SLAPD -F ./slapd.d -h $URI2 -d $LVL $TIMING >> $LOG2 2>&1 & > SLAVEPID=$! > if test $WAIT != 0 ; then > echo SLAVEPID $SLAVEPID > read foo > fi > KILLPIDS="$KILLPIDS $SLAVEPID" > cd $TESTWD > > sleep 1 > > echo "Using ldapsearch to check that consumer slapd is running..." > for i in 0 1 2 3 4 5; do > $LDAPSEARCH -s base -b "" -H $URI2 \ > 'objectclass=*' > /dev/null 2>&1 > RC=$? > if test $RC = 0 ; then > break > fi > echo "Waiting 5 seconds for slapd to start..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > echo "Starting consumer2 slapd on TCP/IP port $PORT3..." > cd $CONDIR2 > echo "======================= RESTART =======================" >> $LOG3 > $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING >> $LOG3 2>&1 & > SLAVE2PID=$! > if test $WAIT != 0 ; then > echo SLAVE2PID $SLAVE2PID > read foo > fi > KILLPIDS="$KILLPIDS $SLAVE2PID" > cd $TESTWD > > sleep 1 > > echo "Using ldapsearch to check that consumer2 slapd is running..." > for i in 0 1 2 3 4 5; do > $LDAPSEARCH -s base -b "" -H $URI3 \ > 'objectclass=*' > /dev/null 2>&1 > RC=$? > if test $RC = 0 ; then > break > fi > echo "Waiting 5 seconds for slapd to start..." > sleep 5 > done > > if test $RC != 0 ; then > echo "ldapsearch failed ($RC)!" > test $KILLSERVERS != no && kill -HUP $KILLPIDS > exit $RC > fi > > # Insert modifications and more tests here. > SLEEP=10 > echo "Waiting $SLEEP seconds for servers to resync..." > sleep $SLEEP > > echo "Start gdb for:" > echo "PIDS: $KILLPIDS" > > for LDIFORDERED in $PWD/data/ldifs/*; do > /usr/bin/time -f "%e" -o time -- $LDAPADD -D "$MANAGERDN" -H $URI1 -w > $PASSWD -f $LDIFORDERED >> ldif.log 2>&1 > RC=$? > SLAPDS=$(pidof slapd | wc -w) > TOOK=$(cat time) > if [ "x$RC" = "x0" ]; then > echo "Added: $(basename $LDIFORDERED) in $TOOK s - OK (# of slapds: > $SLAPDS)" > else > echo "Added: $(basename $LDIFORDERED) in $TOOK s - Failed (# of > slapds: $SLAPDS)" > fi > sleep 1 > if [ "x$SLAPDS" != "x3" ]; then > echo "At least one slapd died ... test failed" > break > fi > done > > test $KILLSERVERS != no && kill -HUP $KILLPIDS > > echo ">>>>> Test succeeded" > > test $KILLSERVERS != no && wait > > exit 0 > > --------------030505030300050004060200-- > > >

1 0

Re: (ITS#5332) multimaster replication crash
by Marcel.Ritter＠rrze.uni-erlangen.de 04 Feb '08

04 Feb '08

This is a multi-part message in MIME format. --------------030505030300050004060200 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Attached the ./configure output (if you really need config.log - which is quite big please let me know). There's not much to say about the config: I'm simply using the config from tests/scripts/test050-syncrepl-multimaster and a modified version of this script (the only change is, to add quite a lot of users to the ldap database at the very end) # compile openldap ./configure make # prepare tests cd tests # replace original test cp /download/test050-syncrepl-multimaster scripts/ # create input ldifs mkdir scripts/data/ldifs/ cd scripts/data/ldifs # this will create several ldif files, each containing 1000 users /download/usersldif2.py | split -l 20000 - cd - # now run modified test: ./run test050-syncrepl-multimaster # ... now wait and see ... ... Start gdb for: PIDS: 13801 13814 13824 Added: xaa in 76.78 s - OK (# of slapds: 3) Added: xab in 129.22 s - OK (# of slapds: 3) ./scripts/test050-syncrepl-multimaster: line 621: 13824 Segmenation fault $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING >> $LOG3 2>&1 (wd: ~/packages/BUILD/openldap-2.4.7/tests/testrun/con2) Added: xac in 176.26 s - OK (# of slapds: 2) At least one slapd died ... test failed ./scripts/test050-syncrepl-multimaster: line 638: kill: (13824) - No such process As far as I can see there are 2 possible outcomes: (At least) one of the slapd processes crashes (see above), or it get's caught in an endless loop (using up 100% CPU usage). Bye, Marcel -- ---- Dipl.-Inf. Marcel Ritter Linux/Novell Regionales Rechenzentrum Erlangen Tel: 09131 / 85-27808 E-Mail: Marcel.Ritter(a)rrze.uni-erlangen.de ---- Unix _IS_ user friendly... It's just selective about who its friends are. --------------030505030300050004060200 Content-Type: text/x-log; name="configure.log" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="configure.log" Configuring OpenLDAP 2.4.7-Release ... checking build system type... x86_64-unknown-linux-gnu checking host system type... x86_64-unknown-linux-gnu checking target system type... x86_64-unknown-linux-gnu checking for a BSD-compatible install... /usr/bin/install -c checking whether build environment is sane... yes checking for gawk... gawk checking whether make sets $(MAKE)... yes checking configure arguments... done checking for cc... cc checking for ar... ar checking for style of include used by make... GNU checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether cc accepts -g... yes checking for cc option to accept ANSI C... none needed checking dependency style of cc... none checking for a sed that does not truncate output... /usr/bin/sed checking for egrep... grep -E checking for ld used by cc... /usr/x86_64-suse-linux/bin/ld checking if the linker (/usr/x86_64-suse-linux/bin/ld) is GNU ld... yes checking for /usr/x86_64-suse-linux/bin/ld option to reload object files... -r checking for BSD-compatible nm... /usr/bin/nm -B checking whether ln -s works... yes checking how to recognise dependent libraries... pass_all checking how to run the C preprocessor... cc -E checking for ANSI C header files... yes checking for sys/types.h... yes checking for sys/stat.h... yes checking for stdlib.h... yes checking for string.h... yes checking for memory.h... yes checking for strings.h... yes checking for inttypes.h... yes checking for stdint.h... yes checking for unistd.h... yes checking dlfcn.h usability... yes checking dlfcn.h presence... yes checking for dlfcn.h... yes checking the maximum length of command line arguments... 32768 checking command to parse /usr/bin/nm -B output from cc object... ok checking for objdir... .libs checking for ranlib... ranlib checking for strip... strip checking if cc static flag works... yes checking if cc supports -fno-rtti -fno-exceptions... no checking for cc option to produce PIC... -fPIC checking if cc PIC flag -fPIC works... yes checking if cc supports -c -o file.o... yes checking whether the cc linker (/usr/x86_64-suse-linux/bin/ld -m elf_x86_64) supports shared libraries... yes checking whether -lc should be explicitly linked in... no checking dynamic linker characteristics... GNU/Linux ld.so checking how to hardcode library paths into programs... immediate checking whether stripping libraries is possible... yes checking for shl_load... no checking for shl_load in -ldld... no checking for dlopen... no checking for dlopen in -ldl... yes checking whether a program can dlopen itself... yes checking whether a statically linked program can dlopen itself... yes checking if libtool supports shared libraries... yes checking whether to build shared libraries... yes checking whether to build static libraries... yes configure: creating libtool checking how to run the C preprocessor... cc -E checking for be_app in -lbe... no checking whether we are using the GNU C compiler... (cached) yes checking whether cc accepts -g... (cached) yes checking for cc option to accept ANSI C... (cached) none needed checking dependency style of cc... (cached) none checking for cc depend flag... -M checking for afopen in -ls... no checking for EBCDIC... no checking for ANSI C header files... yes checking for dirent.h that defines DIR... yes checking for library containing opendir... none required checking for sys/wait.h that is POSIX.1 compatible... yes checking whether termios.h defines TIOCGWINSZ... no checking whether sys/ioctl.h defines TIOCGWINSZ... yes checking arpa/inet.h usability... yes checking arpa/inet.h presence... yes checking for arpa/inet.h... yes checking arpa/nameser.h usability... yes checking arpa/nameser.h presence... yes checking for arpa/nameser.h... yes checking assert.h usability... yes checking assert.h presence... yes checking for assert.h... yes checking bits/types.h usability... yes checking bits/types.h presence... yes checking for bits/types.h... yes checking conio.h usability... no checking conio.h presence... no checking for conio.h... no checking crypt.h usability... yes checking crypt.h presence... yes checking for crypt.h... yes checking direct.h usability... no checking direct.h presence... no checking for direct.h... no checking errno.h usability... yes checking errno.h presence... yes checking for errno.h... yes checking fcntl.h usability... yes checking fcntl.h presence... yes checking for fcntl.h... yes checking filio.h usability... no checking filio.h presence... no checking for filio.h... no checking getopt.h usability... yes checking getopt.h presence... yes checking for getopt.h... yes checking grp.h usability... yes checking grp.h presence... yes checking for grp.h... yes checking io.h usability... no checking io.h presence... no checking for io.h... no checking libutil.h usability... no checking libutil.h presence... no checking for libutil.h... no checking limits.h usability... yes checking limits.h presence... yes checking for limits.h... yes checking locale.h usability... yes checking locale.h presence... yes checking for locale.h... yes checking malloc.h usability... yes checking malloc.h presence... yes checking for malloc.h... yes checking for memory.h... (cached) yes checking psap.h usability... no checking psap.h presence... no checking for psap.h... no checking pwd.h usability... yes checking pwd.h presence... yes checking for pwd.h... yes checking process.h usability... no checking process.h presence... no checking for process.h... no checking sgtty.h usability... yes checking sgtty.h presence... yes checking for sgtty.h... yes checking shadow.h usability... yes checking shadow.h presence... yes checking for shadow.h... yes checking stddef.h usability... yes checking stddef.h presence... yes checking for stddef.h... yes checking for string.h... (cached) yes checking for strings.h... (cached) yes checking sysexits.h usability... yes checking sysexits.h presence... yes checking for sysexits.h... yes checking sys/file.h usability... yes checking sys/file.h presence... yes checking for sys/file.h... yes checking sys/filio.h usability... no checking sys/filio.h presence... no checking for sys/filio.h... no checking sys/fstyp.h usability... no checking sys/fstyp.h presence... no checking for sys/fstyp.h... no checking sys/errno.h usability... yes checking sys/errno.h presence... yes checking for sys/errno.h... yes checking sys/ioctl.h usability... yes checking sys/ioctl.h presence... yes checking for sys/ioctl.h... yes checking sys/param.h usability... yes checking sys/param.h presence... yes checking for sys/param.h... yes checking sys/privgrp.h usability... no checking sys/privgrp.h presence... no checking for sys/privgrp.h... no checking sys/resource.h usability... yes checking sys/resource.h presence... yes checking for sys/resource.h... yes checking sys/select.h usability... yes checking sys/select.h presence... yes checking for sys/select.h... yes checking sys/socket.h usability... yes checking sys/socket.h presence... yes checking for sys/socket.h... yes checking for sys/stat.h... (cached) yes checking sys/syslog.h usability... yes checking sys/syslog.h presence... yes checking for sys/syslog.h... yes checking sys/time.h usability... yes checking sys/time.h presence... yes checking for sys/time.h... yes checking for sys/types.h... (cached) yes checking sys/uio.h usability... yes checking sys/uio.h presence... yes checking for sys/uio.h... yes checking sys/vmount.h usability... no checking sys/vmount.h presence... no checking for sys/vmount.h... no checking syslog.h usability... yes checking syslog.h presence... yes checking for syslog.h... yes checking termios.h usability... yes checking termios.h presence... yes checking for termios.h... yes checking for unistd.h... (cached) yes checking utime.h usability... yes checking utime.h presence... yes checking for utime.h... yes checking for resolv.h... yes checking for netinet/tcp.h... yes checking for sys/ucred.h... no checking for sigaction... yes checking for sigset... yes checking for socket... yes checking for select... yes checking for sys/select.h... (cached) yes checking for sys/socket.h... (cached) yes checking types of arguments for select... int,fd_set *,struct timeval * checking for poll... yes checking poll.h usability... yes checking poll.h presence... yes checking for poll.h... yes checking sys/poll.h usability... yes checking sys/poll.h presence... yes checking for sys/poll.h... yes checking sys/epoll.h usability... yes checking sys/epoll.h presence... yes checking for sys/epoll.h... yes checking for epoll system call... yes checking sys/devpoll.h usability... no checking sys/devpoll.h presence... no checking for sys/devpoll.h... no checking declaration of sys_errlist... yes checking for strerror... yes checking for strerror_r... yes checking non-posix strerror_r... no checking for regex.h... yes checking for library containing regfree... none required checking for compatible POSIX regex... yes checking sys/uuid.h usability... no checking sys/uuid.h presence... no checking for sys/uuid.h... no checking uuid/uuid.h usability... yes checking uuid/uuid.h presence... yes checking for uuid/uuid.h... yes checking for library containing uuid_generate... -luuid checking for resolver link (default)... no checking for resolver link (-lresolv)... yes checking for hstrerror... yes checking for getaddrinfo... yes checking for getnameinfo... yes checking for gai_strerror... yes checking for inet_ntop... yes checking INET6_ADDRSTRLEN... yes checking struct sockaddr_storage... yes checking sys/un.h usability... yes checking sys/un.h presence... yes checking for sys/un.h... yes checking openssl/ssl.h usability... yes checking openssl/ssl.h presence... yes checking for openssl/ssl.h... yes checking for SSL_library_init in -lssl... yes checking OpenSSL library version (CRL checking capability)... yes checking for _beginthread... no checking pthread.h usability... yes checking pthread.h presence... yes checking for pthread.h... yes checking POSIX thread version... 10 checking for LinuxThreads pthread.h... no checking for GNU Pth pthread.h... no checking sched.h usability... yes checking sched.h presence... yes checking for sched.h... yes checking for pthread_create in default libraries... no checking for pthread link with -kthread... no checking for pthread link with -pthread... yes checking for sched_yield... yes checking for pthread_yield... yes checking for thr_yield... no checking for pthread_kill... yes checking for pthread_rwlock_destroy with <pthread.h>... yes checking for pthread_detach with <pthread.h>... yes checking for pthread_setconcurrency... yes checking for pthread_getconcurrency... yes checking for thr_setconcurrency... no checking for thr_getconcurrency... no checking for pthread_kill_other_threads_np... no checking for LinuxThreads implementation... no checking for LinuxThreads consistency... no checking if pthread_create() works... yes checking if select yields when using pthreads... yes checking for thread specific errno... yes checking for thread specific h_errno... yes checking for ctime_r... yes checking for gethostbyname_r... yes checking for gethostbyaddr_r... yes checking number of arguments of ctime_r... 2 checking number of arguments of gethostbyname_r... 6 checking number of arguments of gethostbyaddr_r... 8 checking db.h usability... yes checking db.h presence... yes checking for db.h... yes checking for Berkeley DB major version... 4 checking for Berkeley DB minor version... 5 checking for Berkeley DB link (-ldb-4.5)... yes checking for Berkeley DB version match... yes checking for Berkeley DB thread support... yes checking Berkeley DB version for BDB/HDB backends... yes checking for openlog... yes checking unicode/utypes.h usability... no checking unicode/utypes.h presence... no checking for unicode/utypes.h... no configure: WARNING: ICU not available checking sasl/sasl.h usability... yes checking sasl/sasl.h presence... yes checking for sasl/sasl.h... yes checking sasl.h usability... no checking sasl.h presence... no checking for sasl.h... no checking for sasl_client_init in -lsasl2... yes checking Cyrus SASL library version... yes checking for sasl_version... yes checking fetch(3) library... no checking for setproctitle... no checking for setproctitle in -lutil... no checking for mode_t... yes checking for off_t... yes checking for pid_t... yes checking for ssize_t... yes checking for caddr_t... yes checking for size_t... yes checking for long long... yes checking for ptrdiff_t... yes checking for socklen_t... yes checking the type of arg 3 to accept()... socklen_t * checking return type of signal handlers... void checking for sig_atomic_t... yes checking for uid_t in sys/types.h... yes checking whether time.h and sys/time.h may both be included... yes checking whether struct tm is in sys/time.h or time.h... time.h checking for struct stat.st_blksize... yes checking for struct passwd.pw_gecos... yes checking for struct passwd.pw_passwd... yes checking if toupper() requires islower()... no checking for an ANSI C-conforming const... yes checking if compiler understands volatile... yes checking whether byte ordering is bigendian... no checking for short... yes checking size of short... 2 checking for int... yes checking size of int... 4 checking for long... yes checking size of long... 8 checking for long long... (cached) yes checking size of long long... 8 checking for wchar_t... yes checking size of wchar_t... 4 checking for working memcmp... yes checking for strftime... yes checking for inet_aton()... yes checking for _spawnlp... no checking for _snprintf... no checking for _vsnprintf... no checking for vprintf... yes checking for _doprnt... no checking for snprintf... yes checking for vsnprintf... yes checking for bcopy... yes checking for closesocket... no checking for chroot... yes checking for endgrent... yes checking for endpwent... yes checking for fcntl... yes checking for flock... yes checking for fstat... yes checking for getdtablesize... yes checking for getgrgid... yes checking for gethostname... yes checking for getpass... yes checking for getpassphrase... no checking for getpwuid... yes checking for getpwnam... yes checking for getspnam... yes checking for gettimeofday... yes checking for initgroups... yes checking for inet_ntoa_b... no checking for ioctl... yes checking for lockf... yes checking for memcpy... yes checking for memmove... yes checking for memrchr... yes checking for mkstemp... yes checking for mktemp... yes checking for pipe... yes checking for read... yes checking for recv... yes checking for recvfrom... yes checking for setpwfile... no checking for setgid... yes checking for setegid... yes checking for setsid... yes checking for setuid... yes checking for seteuid... yes checking for signal... yes checking for strdup... yes checking for strpbrk... yes checking for strrchr... yes checking for strsep... yes checking for strstr... yes checking for strtol... yes checking for strtoul... yes checking for strtoq... yes checking for strtouq... yes checking for strtoll... yes checking for strspn... yes checking for sysconf... yes checking for waitpid... yes checking for wait4... yes checking for write... yes checking for send... yes checking for sendmsg... yes checking for sendto... yes checking for getopt... yes checking for getpeereid... no checking for getpeerucred... no checking for struct msghdr.msg_accrightslen... no checking for struct msghdr.msg_control... yes checking for struct stat.st_fstype... no checking for struct stat.st_vfstype... no configure: creating ./config.status config.status: creating Makefile config.status: creating doc/Makefile config.status: creating doc/man/Makefile config.status: creating doc/man/man1/Makefile config.status: creating doc/man/man3/Makefile config.status: creating doc/man/man5/Makefile config.status: creating doc/man/man8/Makefile config.status: creating clients/Makefile config.status: creating clients/tools/Makefile config.status: creating include/Makefile config.status: creating libraries/Makefile config.status: creating libraries/liblber/Makefile config.status: creating libraries/libldap/Makefile config.status: creating libraries/libldap_r/Makefile config.status: creating libraries/liblunicode/Makefile config.status: creating libraries/liblutil/Makefile config.status: creating libraries/librewrite/Makefile config.status: creating servers/Makefile config.status: creating servers/slapd/Makefile config.status: creating servers/slapd/back-bdb/Makefile config.status: creating servers/slapd/back-dnssrv/Makefile config.status: creating servers/slapd/back-hdb/Makefile config.status: creating servers/slapd/back-ldap/Makefile config.status: creating servers/slapd/back-ldif/Makefile config.status: creating servers/slapd/back-meta/Makefile config.status: creating servers/slapd/back-monitor/Makefile config.status: creating servers/slapd/back-null/Makefile config.status: creating servers/slapd/back-passwd/Makefile config.status: creating servers/slapd/back-perl/Makefile config.status: creating servers/slapd/back-relay/Makefile config.status: creating servers/slapd/back-shell/Makefile config.status: creating servers/slapd/back-sql/Makefile config.status: creating servers/slapd/shell-backends/Makefile config.status: creating servers/slapd/slapi/Makefile config.status: creating servers/slapd/overlays/Makefile config.status: creating tests/Makefile config.status: creating tests/run config.status: creating tests/progs/Makefile config.status: creating include/portable.h config.status: creating include/ldap_features.h config.status: creating include/lber_types.h config.status: executing depfiles commands config.status: executing default commands Making servers/slapd/backends.c Add config ... Add ldif ... Add monitor ... Add bdb ... Add hdb ... Add relay ... Making servers/slapd/overlays/statover.c Add seqmod ... Add syncprov ... Please run "make depend" to build dependencies --------------030505030300050004060200 Content-Type: text/x-python; name="usersldif2.py" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="usersldif2.py" #!/usr/bin/env python import string import sys uids=[] for lineno in xrange(0,100000): print """dn: uid=test%(lineno)s,ou=People,dc=example,dc=com objectClass: top objectClass: posixAccount objectClass: shadowAccount objectClass: inetOrgPerson cn: User %(lineno)s gecos: User %(lineno)s gidNumber: %(lineno)s homeDirectory: /home/test%(lineno)s loginShell: /bin/bash shadowInactive: -1 shadowLastChange: 12570 shadowMax: 99999 shadowMin: 0 shadowWarning: 7 sn: test%(lineno)s uid: test%(lineno)s uidNumber: %(lineno)s userPassword: {crypt}WNu26PDD.aYC. """ % { 'lineno': lineno } --------------030505030300050004060200 Content-Type: text/plain; name="test050-syncrepl-multimaster" Content-Transfer-Encoding: 7bit Content-Disposition: inline; filename="test050-syncrepl-multimaster" #! /bin/sh # $OpenLDAP: pkg/ldap/tests/scripts/test050-syncrepl-multimaster,v 1.7 2008/01/07 23:20:17 kurt Exp $ ## This work is part of OpenLDAP Software <http://www.openldap.org/>. ## ## Copyright 1998-2008 The OpenLDAP Foundation. ## All rights reserved. ## ## Redistribution and use in source and binary forms, with or without ## modification, are permitted only as authorized by the OpenLDAP ## Public License. ## ## A copy of this license is available in the file LICENSE in the ## top-level directory of the distribution or, alternatively, at ## <http://www.OpenLDAP.org/license.html>. echo "running defines.sh" . $SRCDIR/scripts/defines.sh if test $SYNCPROV = syncprovno; then echo "Syncrepl provider overlay not available, test skipped" exit 0 fi PRODIR=$TESTDIR/pro CONDIR=$TESTDIR/con CONDIR2=$TESTDIR/con2 DBPRO=$PRODIR/db DBCON=$CONDIR/db DBCON2=$CONDIR2/db CFPRO=$PRODIR/slapd.d CFCON=$CONDIR/slapd.d CFCON2=$CONDIR2/slapd.d mkdir -p $TESTDIR $PRODIR $CONDIR $CONDIR2 $DBPRO $DBCON $DBCON2 $CFPRO $CFCON $CFCON2 $SLAPPASSWD -g -n >$CONFIGPWF # # Test replication of dynamic config: # - start producer # - start consumer # - start consumer2 # - configure over ldap # - populate over ldap # - configure syncrepl over ldap # - retrieve database over ldap and compare against expected results # echo "Initializing server configurations..." $SLAPADD -F $CFCON2 -n 0 <<EOF dn: cn=config objectClass: olcGlobal cn: config olcServerID: 3 dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW:< file://$CONFIGPWF EOF $SLAPADD -F $CFCON -n 0 <<EOF dn: cn=config objectClass: olcGlobal cn: config olcServerID: 2 dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW:< file://$CONFIGPWF EOF $SLAPADD -F $CFPRO -n 0 <<EOF dn: cn=config objectClass: olcGlobal cn: config olcServerID: 1 dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config olcRootPW:< file://$CONFIGPWF EOF echo "Starting producer slapd on TCP/IP port $PORT1..." cd $PRODIR $SLAPD -F slapd.d -h $URI1 -d $LVL $TIMING > $LOG1 2>&1 & PID=$! if test $WAIT != 0 ; then echo PID $PID read foo fi KILLPIDS="$PID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that producer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI1 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Inserting syncprov overlay on producer..." if [ "$SYNCPROV" = syncprovmod ]; then $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF > $TESTOUT 2>&1 dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: ../../../servers/slapd/overlays olcModuleLoad: syncprov.la EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for moduleLoad ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi fi # # Note that we configure a timeout here; it's possible for both # servers to attempt to bind to each other while a modify to # cn=config is in progress. When the modify pauses the thread pool # neither server will progress. The timeout will drop the syncrepl # attempt and allow the modifies to complete. # read CONFIGPW < $CONFIGPWF $LDAPMODIFY -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >> $TESTOUT 2>&1 dn: cn=config changetype: modify replace: olcServerID olcServerID: 1 $URI1 olcServerID: 2 $URI2 olcServerID: 3 $URI3 dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 - add: olcMirrorMode olcMirrorMode: TRUE EOF RC=$? if test $RC != 0 ; then echo "ldapmodify failed for syncrepl config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Starting consumer slapd on TCP/IP port $PORT2..." cd $CONDIR $SLAPD -F ./slapd.d -h $URI2 -d $LVL $TIMING > $LOG2 2>&1 & SLAVEPID=$! if test $WAIT != 0 ; then echo SLAVEPID $SLAVEPID read foo fi KILLPIDS="$KILLPIDS $SLAVEPID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI2 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Configuring syncrepl on consumer..." $LDAPMODIFY -D cn=config -H $URI2 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 - add: olcMirrorMode olcMirrorMode: TRUE EOF echo "Starting consumer2 slapd on TCP/IP port $PORT3..." cd $CONDIR2 $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING > $LOG3 2>&1 & SLAVE2PID=$! if test $WAIT != 0 ; then echo SLAVE2PID $SLAVE2PID read foo fi KILLPIDS="$KILLPIDS $SLAVE2PID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer2 slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI3 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Configuring syncrepl on consumer2..." $LDAPMODIFY -D cn=config -H $URI3 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: olcDatabase={0}config,cn=config changetype: modify add: olcSyncRepl olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=002 provider=$URI2 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 olcSyncRepl: rid=003 provider=$URI3 binddn="cn=config" bindmethod=simple credentials=$CONFIGPW searchbase="cn=config" type=refreshAndPersist retry="5 5 300 5" timeout=1 - add: olcMirrorMode olcMirrorMode: TRUE EOF echo "Adding schema and databases on producer..." $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 include: file://$ABS_SCHEMADIR/core.ldif include: file://$ABS_SCHEMADIR/cosine.ldif include: file://$ABS_SCHEMADIR/inetorgperson.ldif include: file://$ABS_SCHEMADIR/openldap.ldif include: file://$ABS_SCHEMADIR/nis.ldif EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for schema config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi if [ "$BACKENDTYPE" = mod ]; then $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: cn=module,cn=config objectClass: olcModuleList cn: module olcModulePath: ../../../servers/slapd/back-$BACKEND olcModuleLoad: back_$BACKEND.la EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for backend config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi fi $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1 dn: olcDatabase={1}$BACKEND,cn=config objectClass: olcDatabaseConfig objectClass: olc${BACKEND}Config olcDatabase: {1}$BACKEND olcSuffix: $BASEDN olcDbDirectory: ./db olcRootDN: $MANAGERDN olcRootPW: $PASSWD olcSyncRepl: rid=004 provider=$URI1 binddn="$MANAGERDN" bindmethod=simple credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly interval=00:00:00:10 retry="5 5 300 5" timeout=1 olcSyncRepl: rid=005 provider=$URI2 binddn="$MANAGERDN" bindmethod=simple credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly interval=00:00:00:10 retry="5 5 300 5" timeout=1 olcSyncRepl: rid=006 provider=$URI3 binddn="$MANAGERDN" bindmethod=simple credentials=$PASSWD searchbase="$BASEDN" type=refreshOnly interval=00:00:00:10 retry="5 5 300 5" timeout=1 olcMirrorMode: TRUE dn: olcOverlay=syncprov,olcDatabase={1}${BACKEND},cn=config changetype: add objectClass: olcOverlayConfig objectClass: olcSyncProvConfig olcOverlay: syncprov EOF RC=$? if test $RC != 0 ; then echo "ldapadd failed for database config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapadd to populate producer..." $LDAPADD -D "$MANAGERDN" -H $URI1 -w $PASSWD -f $LDIFORDERED \ >> $TESTOUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapadd failed for database config ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi SLEEP=20 echo "Waiting $SLEEP seconds for syncrepl to receive changes..." sleep $SLEEP echo "Using ldapsearch to check that syncrepl received database changes..." RC=32 for i in 0 1 2 3 4 5; do RESULT=`$LDAPSEARCH -H $URI2 \ -s base -b "cn=Ursula Hampster,ou=Alumni Association,ou=People,dc=example,dc=com" \ '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'` if test "x$RESULT" = "xOK" ; then RC=0 break fi echo "Waiting 5 seconds for syncrepl to receive changes..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to check that syncrepl received database changes on consumer2..." RC=32 for i in 0 1 2 3 4 5; do RESULT=`$LDAPSEARCH -H $URI3 \ -s base -b "cn=Ursula Hampster,ou=Alumni Association,ou=People,dc=example,dc=com" \ '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'` if test "x$RESULT" = "xOK" ; then RC=0 break fi echo "Waiting 5 seconds for syncrepl to receive changes..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read config from the producer..." $LDAPSEARCH -b cn=config -D cn=config -H $URI1 -y $CONFIGPWF \ 'objectclass=*' > $MASTEROUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at producer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read config from the consumer..." $LDAPSEARCH -b cn=config -D cn=config -H $URI2 -y $CONFIGPWF \ 'objectclass=*' > $SLAVEOUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read config from consumer2..." $LDAPSEARCH -b cn=config -D cn=config -H $URI3 -y $CONFIGPWF \ 'objectclass=*' > $SLAVE2OUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer2 ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Filtering producer results..." . $LDIFFILTER < $MASTEROUT > $MASTERFLT echo "Filtering consumer results..." . $LDIFFILTER < $SLAVEOUT > $SLAVEFLT echo "Filtering consumer2 results..." . $LDIFFILTER < $SLAVE2OUT > $SLAVE2FLT echo "Comparing retrieved configs from producer and consumer..." $CMP $MASTERFLT $SLAVEFLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer configs differ" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit 1 fi echo "Comparing retrieved configs from producer and consumer2..." $CMP $MASTERFLT $SLAVE2FLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer2 configs differ" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit 1 fi echo "Using ldapsearch to read all the entries from the producer..." $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI1 -w $PASSWD \ 'objectclass=*' > $MASTEROUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at producer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read all the entries from the consumer..." $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI2 -w $PASSWD \ 'objectclass=*' > $SLAVEOUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Using ldapsearch to read all the entries from the consumer2..." $LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI3 -w $PASSWD \ 'objectclass=*' > $SLAVE2OUT 2>&1 RC=$? if test $RC != 0 ; then echo "ldapsearch failed at consumer2 ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi test $KILLSERVERS != no && kill -HUP $KILLPIDS echo "Filtering producer results..." . $LDIFFILTER < $MASTEROUT > $MASTERFLT echo "Filtering consumer results..." . $LDIFFILTER < $SLAVEOUT > $SLAVEFLT echo "Filtering consumer2 results..." . $LDIFFILTER < $SLAVE2OUT > $SLAVE2FLT echo "Comparing retrieved entries from producer and consumer..." $CMP $MASTERFLT $SLAVEFLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer databases differ" exit 1 fi echo "Comparing retrieved entries from producer and consumer2..." $CMP $MASTERFLT $SLAVE2FLT > $CMPOUT if test $? != 0 ; then echo "test failed - producer and consumer2 databases differ" exit 1 fi test $KILLSERVERS != no && wait echo "Restarting servers..." echo "Starting producer slapd on TCP/IP port $PORT1..." cd $PRODIR echo "======================= RESTART =======================" >> $LOG1 $SLAPD -F ./slapd.d -h $URI1 -d $LVL $TIMING >> $LOG1 2>&1 & PID=$! if test $WAIT != 0 ; then echo PID $PID read foo fi KILLPIDS="$PID" cd $TESTWD echo "Using ldapsearch to check that producer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI1 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi #exit 0 echo "Starting consumer slapd on TCP/IP port $PORT2..." cd $CONDIR echo "======================= RESTART =======================" >> $LOG2 $SLAPD -F ./slapd.d -h $URI2 -d $LVL $TIMING >> $LOG2 2>&1 & SLAVEPID=$! if test $WAIT != 0 ; then echo SLAVEPID $SLAVEPID read foo fi KILLPIDS="$KILLPIDS $SLAVEPID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI2 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi echo "Starting consumer2 slapd on TCP/IP port $PORT3..." cd $CONDIR2 echo "======================= RESTART =======================" >> $LOG3 $SLAPD -F ./slapd.d -h $URI3 -d $LVL $TIMING >> $LOG3 2>&1 & SLAVE2PID=$! if test $WAIT != 0 ; then echo SLAVE2PID $SLAVE2PID read foo fi KILLPIDS="$KILLPIDS $SLAVE2PID" cd $TESTWD sleep 1 echo "Using ldapsearch to check that consumer2 slapd is running..." for i in 0 1 2 3 4 5; do $LDAPSEARCH -s base -b "" -H $URI3 \ 'objectclass=*' > /dev/null 2>&1 RC=$? if test $RC = 0 ; then break fi echo "Waiting 5 seconds for slapd to start..." sleep 5 done if test $RC != 0 ; then echo "ldapsearch failed ($RC)!" test $KILLSERVERS != no && kill -HUP $KILLPIDS exit $RC fi # Insert modifications and more tests here. SLEEP=10 echo "Waiting $SLEEP seconds for servers to resync..." sleep $SLEEP echo "Start gdb for:" echo "PIDS: $KILLPIDS" for LDIFORDERED in $PWD/data/ldifs/*; do /usr/bin/time -f "%e" -o time -- $LDAPADD -D "$MANAGERDN" -H $URI1 -w $PASSWD -f $LDIFORDERED >> ldif.log 2>&1 RC=$? SLAPDS=$(pidof slapd | wc -w) TOOK=$(cat time) if [ "x$RC" = "x0" ]; then echo "Added: $(basename $LDIFORDERED) in $TOOK s - OK (# of slapds: $SLAPDS)" else echo "Added: $(basename $LDIFORDERED) in $TOOK s - Failed (# of slapds: $SLAPDS)" fi sleep 1 if [ "x$SLAPDS" != "x3" ]; then echo "At least one slapd died ... test failed" break fi done test $KILLSERVERS != no && kill -HUP $KILLPIDS echo ">>>>> Test succeeded" test $KILLSERVERS != no && wait exit 0 --------------030505030300050004060200--

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

openldap-bugs