https://bugs.openldap.org/show_bug.cgi?id=10286
Issue ID: 10286 Summary: ldap_pvt_gettime may result in "not new enough csn" problems in multi-thread case. Product: OpenLDAP Version: 2.6.6 Hardware: All OS: All Status: UNCONFIRMED Keywords: needs_review Severity: normal Priority: --- Component: libraries Assignee: bugs@openldap.org Reporter: 971748261@qq.com Target Milestone: ---
Created attachment 1041 --> https://bugs.openldap.org/attachment.cgi?id=1041&action=edit the log of adding two entry which shows the time sequence.
I used openldap as krb5's database, and openldap was deploymented in mirrormode.
I tried to add kerberos principals via kadmin.local -q "addprinc -randkey principal.
slapd log showed that the entry of kadmin/admin was added earlier than the entry of ossuser. But the csn of kadmin/admin was greater than ossuser.
In this case, when the two entry began to sync to the other slapd server, ossuser was ignored because of "csn not new enough"