--On December 13, 2007 1:17:08 AM +0000 quanah@zimbra.com wrote:
Full_Name: Quanah Gibson-Mount Version: 2.3.39
Also broken in OpenLDAP 2.4.7.
This config works as expected:
include "/usr/local/etc/openldap/schema/core.schema" include "/usr/local/etc/openldap/schema/cosine.schema" include "/usr/local/etc/openldap/schema/inetorgperson.schema" threads 8 pidfile "/var/run/slapd.pid" argsfile "/var/run/slapd.args" loglevel 256 modulepath /usr/local/lib/openldap moduleload back_bdb.la moduleload back_hdb.la moduleload back_monitor.la moduleload syncprov.la moduleload accesslog.la access to * by * write database config rootpw secret database bdb suffix "" rootdn "cn=config" cachesize 10000 idlcachesize 10000 checkpoint 64 5 directory "/usr/local/openldap-data" index objectClass eq index uid pres,eq index mail pres,eq,sub index cn pres,eq,sub index displayName pres,eq,sub index sn pres,eq,sub index gn pres,eq,sub index entryUUID eq index entryCSN eq sizelimit unlimited timelimit unlimited overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 500
Modifying it so that it is now:
include "/usr/local/etc/openldap/schema/core.schema" include "/usr/local/etc/openldap/schema/cosine.schema" include "/usr/local/etc/openldap/schema/inetorgperson.schema" threads 8 pidfile "/var/run/slapd.pid" argsfile "/var/run/slapd.args" loglevel 256 modulepath /usr/local/lib/openldap moduleload back_bdb.la moduleload back_hdb.la moduleload back_monitor.la moduleload syncprov.la moduleload accesslog.la access to * by * write database config rootpw secret include /usr/local/etc/openldap/bdb-conf include /usr/local/etc/openldap/overlays-conf
Where bdb-conf is:
database bdb suffix "" rootdn "cn=config" cachesize 10000 idlcachesize 10000 checkpoint 64 5 directory "/usr/local/openldap-data" index objectClass eq index uid pres,eq index mail pres,eq,sub index cn pres,eq,sub index displayName pres,eq,sub index sn pres,eq,sub index gn pres,eq,sub index entryUUID eq index entryCSN eq sizelimit unlimited timelimit unlimited
and overlays-conf is:
overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 500
The contextCSN is never created in the root database, whereas in the former example it is.
I did other experiments with a more complicated config, and managed to completely lock up slapd as well.
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration