hello everybody,<br><br>I&#39;m quite new to OpenLdap. Actually i&#39;ve been using it for a few years, but I have no deep knowlege.<br>The problem I&#39;m facing is my cosumer replicas are segfaulting.<br>My design:<br>I have one master with several o=BranchX,dc=example,dc=com This is provider.<br>
I have several (the number is X-1) replicas, consumers.<br>All consumers are replicating its branch o=BranchX,dc=example,dc=com and one common branch o=BranchMain,dc=example,dc=com.<br>The picture is&nbsp; like this:<br><br>Provider<br>
o=BranchMain,dc=example,dc=com<br>o=Branch1,dc=example,dc=com<br>o=Branch2,dc=example,dc=com<br>.....<br>o=BranchX,dc=example,dc=com<br><br>Consumer 1:<br>o=BranchMain,dc=example,dc=com<br>
o=Branch1,dc=example,dc=com<br><br>Consumer 2:<br>o=BranchMain,dc=example,dc=com<br>
o=Branch2,dc=example,dc=com<br><br>At the begining I had one consumer, which was segfaultin just randomly once or twice a day. I decided to comment out my syncrepl directives in conf file and now it is running for a day and half. I should mention, that after cosumer segfaults I cannot start slapd any more. The only solution I have is to delete ol /var/lib/ldap (all database) directory contents and then restarting slapd. If restarting slapd on the old database - segfaulti is happening.<br>
<br>Since this was a smaill branch and only one branch I thought to debug the problem later. Today I faced the same situation on a biger consumer. The same situation. slapd just crashed and only deleting database helped me to start it again.<br>
<br>My systems are Mandriva 2008.1 with slapd version:<br>@(#) $OpenLDAP: slapd 2.4.8 (Mar 23 2008 16:49:39) $<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mandrake@klodia.mandriva.com:/home/mandrake/rpm/BUILD/openldap-2.4.8/servers/slapd<br><br>I have one branch runing old slapd versions (the ones comming with Mandriva 2007.0), but they seem to work except that I can have replicated only one branch (one rid). Seems old slapd doesn&#39;t support several rids.<br>
<br>Can anybody help me to debug this situation? This configuration is rather new but I was thinking to build all infrastructure on such a configuration, so segfaulting is very big issue.<br>Provider (master) configuration is:<br>
<br>include /usr/share/openldap/schema/core.schema<br>include /usr/share/openldap/schema/cosine.schema<br>include /usr/share/openldap/schema/corba.schema<br>include /usr/share/openldap/schema/inetorgperson.schema<br>include /usr/share/openldap/schema/nis.schema<br>
include /usr/share/openldap/schema/openldap.schema<br>include /usr/share/openldap/schema/samba.schema<br>include /usr/share/openldap/schema/qmail.schema<br>include /etc/openldap/schema/local.schema<br>include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /etc/openldap/slapd.access.conf<br>
access to dn.subtree=&quot;dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by group=&quot;cn=Replicator,ou=Group,dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by users read<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by anonymous read<br>pidfile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/run/ldap/slapd.pid<br>
argsfile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/run/ldap/slapd.args<br>modulepath&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /usr/lib64/openldap<br>moduleload&nbsp;&nbsp;&nbsp;&nbsp; <a href="http://syncprov.la">syncprov.la</a><br>TLSRandFile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /dev/random<br>TLSCipherSuite&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; HIGH:MEDIUM:+SSLv2+SSLv3<br>
TLSCertificateFile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /etc/pki/tls/certs/slapd.pem<br>TLSCertificateKeyFile&nbsp;&nbsp; /etc/pki/tls/certs/slapd.pem<br>TLSCACertificatePath&nbsp;&nbsp;&nbsp; /etc/pki/tls/certs/<br>TLSCACertificateFile&nbsp;&nbsp;&nbsp; /etc/pki/tls/certs/ca-bundle.crt<br>TLSVerifyClient never # ([never]|allow|try|demand)<br>
database&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bdb<br>suffix&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;dc=example,dc=com&quot;<br>rootdn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;cn=Manager,dc=example,dc=com&quot;<br>rootpw&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; secret<br>directory&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/lib/ldap<br>checkpoint 256 5<br>index&nbsp;&nbsp; mailAlternateAddress&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq,sub<br>
index&nbsp;&nbsp; accountStatus,mailHost,deliveryMode&nbsp;&nbsp;&nbsp;&nbsp; eq<br>index&nbsp;&nbsp; default&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sub<br>index&nbsp;&nbsp; objectClass&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>index&nbsp;&nbsp; cn,mail,surname,givenname&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq,subinitial<br>
index&nbsp;&nbsp; uidNumber,gidNumber,memberuid,member,uniqueMember&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>index&nbsp;&nbsp; uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq,subinitial<br>index&nbsp;&nbsp; sambaSID,sambaDomainName,displayName&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>
index&nbsp; entryCSN,entryUUID&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>limits group=&quot;cn=Replicator,dc=infosaitas,dc=lt&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp; size=unlimited<br>&nbsp;&nbsp;&nbsp;&nbsp; time=unlimited<br><br>access to *<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by group=&quot;cn=Replicator,dc=infosaitas,dc=lt&quot; write<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by * read<br>overlay syncprov<br>syncprov-checkpoint 100 10<br>syncprov-sessionlog 10<br><br>Consumers configuration (all the same):<br>include /usr/share/openldap/schema/core.schema<br>include /usr/share/openldap/schema/cosine.schema<br>
include /usr/share/openldap/schema/corba.schema<br>include /usr/share/openldap/schema/inetorgperson.schema<br>include /usr/share/openldap/schema/nis.schema<br>include /usr/share/openldap/schema/openldap.schema<br>include /usr/share/openldap/schema/samba.schema<br>
include /usr/share/openldap/schema/qmail.schema<br>include /etc/openldap/schema/local.schema<br>include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /etc/openldap/slapd.access.conf<br>include&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /etc/openldap/slapd.access.ldapauth.conf<br>access to dn.subtree=&quot;dc=example,dc=com&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by group=&quot;cn=Replicator,ou=Group,dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by users read<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; by anonymous read<br>pidfile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/run/ldap/slapd.pid<br>argsfile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/run/ldap/slapd.args<br>modulepath&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /usr/lib64/openldap<br>
moduleload&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; <a href="http://back_ldap.la">back_ldap.la</a><br>TLSCertificateFile&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /etc/ssl/openldap/ldap.pem<br>TLSCertificateKeyFile&nbsp;&nbsp; /etc/ssl/openldap/ldap.pem<br>TLSCACertificateFile&nbsp;&nbsp;&nbsp; /etc/ssl/openldap/ldap.pem<br>
overlay&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; chain<br>chain-uri&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;ldap://master.server&quot;<br>chain-idassert-bind&nbsp;&nbsp;&nbsp;&nbsp; bindmethod=&quot;simple&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; binddn=&quot;cn=Manager,dc=example,dc=com&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; credentials=secret<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; mode=&quot;none&quot;<br>chain-tls&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; start<br>chain-return-error&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; TRUE<br>database&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bdb<br>suffix&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;dc=example,dc=com&quot;<br>
rootdn&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; &quot;cn=Manager,dc=example,dc=com&quot;<br>rootpw&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; secret<br>directory&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; /var/lib/ldap<br>checkpoint 256 5<br>index&nbsp;&nbsp; objectClass&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>index&nbsp;&nbsp; mailAlternateAddress&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq,sub<br>
index&nbsp;&nbsp; accountStatus,mailHost,deliveryMode&nbsp;&nbsp;&nbsp;&nbsp; eq<br>index&nbsp;&nbsp; default&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; sub<br>index&nbsp;&nbsp; cn,mail,surname,givenname&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq,subinitial<br>index&nbsp;&nbsp; uidNumber,gidNumber,memberuid,member,uniqueMember&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>
index&nbsp;&nbsp; uid&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq,subinitial<br>index&nbsp;&nbsp; sambaSID,sambaDomainName,displayName&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; eq<br>limits group=&quot;cn=Replicator,ou=Group,dc=example,dc=com&quot;<br>&nbsp;size=unlimited<br>
&nbsp;time=unlimited<br><br>syncrepl rid=1<br>&nbsp;&nbsp;&nbsp; provider=ldap://master.server:389<br>&nbsp;&nbsp;&nbsp; type=refreshAndPersist<br>&nbsp;&nbsp;&nbsp; retry=&quot;60 +&quot;<br>&nbsp;&nbsp;&nbsp; searchbase=&quot;o=BranchMain,dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp; filter=&quot;(objectClass=*)&quot;<br>
&nbsp;&nbsp;&nbsp; scope=sub<br>&nbsp;&nbsp;&nbsp; attrs=*<br>&nbsp;&nbsp;&nbsp; schemachecking=off<br>&nbsp;&nbsp;&nbsp; bindmethod=simple<br>&nbsp;&nbsp;&nbsp; binddn=&quot;cn=Manager,dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp; credentials=secret<br>&nbsp;&nbsp;&nbsp; starttls=yes<br>syncrepl rid=2<br>&nbsp;&nbsp;&nbsp; provider=ldap://master.server:389<br>
&nbsp;&nbsp;&nbsp; type=refreshAndPersist<br>&nbsp;&nbsp;&nbsp; retry=&quot;60 +&quot;<br>&nbsp;&nbsp;&nbsp; searchbase=&quot;o=Branch1,dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp; filter=&quot;(objectClass=*)&quot;<br>&nbsp;&nbsp;&nbsp; scope=sub<br>&nbsp;&nbsp;&nbsp; attrs=*<br>&nbsp;&nbsp;&nbsp; schemachecking=off<br>&nbsp;&nbsp;&nbsp; bindmethod=simple<br>
&nbsp;&nbsp;&nbsp; binddn=&quot;cn=Manager,dc=example,dc=com&quot;<br>&nbsp;&nbsp;&nbsp; credentials=secret<br>&nbsp;&nbsp;&nbsp; starttls=yes<br>updateref ldap://master.server<br><br><br>Thanks for any hints on this<br>Liutauras<br>