Full_Name: Bill MacAllister Version: 2.3.43+ and 2.4.16+ OS: debian 4 and 5 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (171.64.19.165)

I have a master server that is running 2.3.43 and a slave running 2.4.16. When the master/replica databases are created an entry has an objectclass=posixaccount and gecos=some-name. When the objectclass/gecos is deleted from the master entry replication on the slave fails with:

Jul 2 11:16:46 ldap-liv1 slapd[30523]: Entry (uid=acyen,cn=accounts,dc=stanford,dc=edu), attribute 'gecos' not allowed Jul 2 11:16:46 ldap-liv1 slapd[30523]: entry failed schema check: attribute 'gecos' not allowed Jul 2 11:16:46 ldap-liv1 slapd[30523]: null_callback : error code 0x41 Jul 2 11:16:46 ldap-liv1 slapd[30523]: syncrepl_message_to_op: rid=000 be_modify uid=acyen,cn=Accounts,dc=Stanford,dc=edu (65) Jul 2 11:16:46 ldap-liv1 slapd[30523]: do_syncrepl: rid=000 rc 65 retrying Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 fd=13 ACCEPT from IP=171.67.22.24:42094 (IP=0.0.0.0:389) Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 op=0 BIND dn="" method=128 Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 op=0 RESULT tag=97 err=0 text= Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 op=1 SRCH base="dc=stanford,dc=edu" scope=0 deref=0 filter="(objectClass=*)" Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 op=2 UNBIND Jul 2 11:17:04 ldap-liv1 slapd[30523]: conn=368 fd=13 closed Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 fd=13 ACCEPT from IP=171.67.16.36:35971 (IP=0.0.0.0:389) Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 op=0 BIND dn="" method=128 Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 op=0 RESULT tag=97 err=0 text= Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 op=1 SRCH base="dc=stanford,dc=edu" scope=0 deref=0 filter="(objectClass=*)" Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 op=1 SEARCH RESULT tag=101 err=0 nentries=1 text= Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 op=2 UNBIND Jul 2 11:17:28 ldap-liv1 slapd[30523]: conn=369 fd=13 closed Jul 2 11:17:28 ldap-liv1 slapd[30523]: connection_read(13): no connection! Jul 2 11:17:46 ldap-liv1 slapd[30523]: Entry (uid=acyen,cn=accounts,dc=stanford,dc=edu), attribute 'gecos' not allowed Jul 2 11:17:46 ldap-liv1 slapd[30523]: entry failed schema check: attribute 'gecos' not allowed Jul 2 11:17:46 ldap-liv1 slapd[30523]: null_callback : error code 0x41 Jul 2 11:17:46 ldap-liv1 slapd[30523]: syncrepl_message_to_op: rid=000 be_modify uid=acyen,cn=Accounts,dc=Stanford,dc=edu (65) Jul 2 11:17:46 ldap-liv1 slapd[30523]: do_syncrepl: rid=000 rc 65 retrying

It looks like there is an attempt to remove objectclass=posixaccount without removing gecos at the same time.

I have re-created the slave database a second time just to make sure there was nothing that I missed with the initial load.