Dear Mike,
Thanks for your response and suggestion.
Today I try to disable the overlay memberof and the replication issue still happening. ie : after adding new recrods into the ldap, it will be deleted in both servers within 30 mins.
Here is my config file again Nov 10 16:38:55 srr200-001 slapd[17528]: nonpresent_callback: rid=001 nonpresent UUID 451658da-621d-102e-8153-61dfa4c1ade1, dn uid=edwardhtmai,ou=users,dc=ygmt,dc=com Nov 10 16:38:55 srr200-001 slapd[17528]: syncrepl_del_nonpresent: rid=001 be_delete uid=edwardhtmai,ou=users,dc=ygmt,dc=com (0)
serverID 1
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/rfc2307bis.schema
include /etc/openldap/schema/yast.schema
include /etc/openldap/schema/samba3.schema
include /etc/openldap/schema/dnszone.schema
include /etc/openldap/schema/ygmt.schema
pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
# Load dynamic backend modules:
modulepath /usr/lib/openldap/modules
access to attrs=SambaLMPassword,SambaNTPassword
by dn="uid=administrator,ou=users,dc=ygmt,dc=com" write
by * none
access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
loglevel 16384
TLSCertificateFile /etc/ssl/servercerts/servercert.pem
TLSCACertificatePath /etc/ssl/certs/
TLSCertificateKeyFile /etc/ssl/servercerts/serverkey.pem
database bdb
suffix "dc=ygmt,dc=com"
rootdn "uid=administrator,ou=users,dc=ygmt,dc=com"
rootpw "12345678pass"
directory /var/lib/ldap
checkpoint 1024 5
cachesize 10000
index objectClass,uidNumber,gidNumber eq
index member,mail eq,pres
index cn,displayname,uid,sn,givenname sub,eq,pres
index sambaSID eq
index sambaPrimaryGroupSID eq
index sambaDomainName eq
index entryCSN,entryUUID eq
index memberUid eq
index uniqueMember eq,pres
index sambaSIDList eq
index sambaGroupType eq
#overlay memberof
syncrepl rid=001
provider=ldap://172.16.2.1
searchbase="dc=ygmt,dc=com"
bindmethod=simple
binddn="uid=administrator,ou=users,dc=ygmt,dc=com"
credentials=12345678pass
type=refreshOnly
interval=00:00:05:00
retry="20 5 300 +"
schemachecking=off
sizelimit=unlimited
timelimit=unlimited
mirrormode on
overlay syncprov
Do you have any idea?
Many thanks~
Ken
Date: Sat, 7 Nov 2009 11:31:27 -0500 From: msmith@cbnco.com To: kokoken@hotmail.com CC: openldap-software@openldap.org Subject: Re: 2.4.19 (stable) - sync replication issue
On Sat, 7 Nov 2009, Ken Ko wrote:
overlay memberof
Try disabling memberof, if you can. It doesn't seem to play well with replication.
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6329;selectid=6329
Mike
_________________________________________________________________ Windows Live: Make it easier for your friends to see what you’re up to on Facebook. http://go.microsoft.com/?linkid=9691816