Hi All,

 

I have a big network with one master openldap 2.3.30 running on Debian Etch fully updated.

 

I have other 27 consumers using replication on refresAndPersist type working 100% fine with one exception.

 

This exception have the same configurations off all other servers. I have already changed the WAN provider (it was planned to change it), the switch where the server is connected, network cable, the hole server and nothing seems to change the strange behavior.

 

What happens is this specific machine does not receive all the 8323 objects from the master. On debug mode it does not show any error. The openldap simply thinks the replica have finished. Then some seconds later it start replicating again but not from the stop point. The best that I have is 5217 objects replicated.

 

My conf on this server was copied from another working installation and then changed the "rid".

 

This is how my conf is:

#######################################################################
# SCHEMAS
#######################################################################
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include         /etc/ldap/schema/misc.schema
include         /etc/ldap/schema/samba.schema

#######################################################################
# GERAL
#######################################################################
#allow bind_v2
pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args
loglevel        4 64 16384
sizelimit 20000
tool-threads 1

#######################################################################
# MODULOS
#######################################################################
modulepath      /usr/lib/ldap
moduleload      back_bdb
moduleload      syncprov

#######################################################################
# BACKEND
#######################################################################
backend         bdb
checkpoint 512 30

#######################################################################
# DATABASE
#######################################################################
database        bdb
suffix          "dc=company"
rootdn          "cn=replicator,dc=company"
rootpw          {SSHA}password
directory       "/var/lib/ldap"
dbconfig set_cachesize 0 2097152 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
lastmod         on

######################################################################
# ACL
######################################################################
access to dn.base=""
        by * read

access to *
        by dn="cn=admin,dc=company" write
        by dn="cn=replicator,dc=company" write
        by * read

access to attrs=userPassword,shadowLastChange,sambaLMPassword,sambaNTPassword
        by dn="cn=admin,dc=company" write
        by dn="cn=replicator,dc=company" write
        by self write
        by anonymous auth
        by * none

 

######################################################################
# TLS
######################################################################
TLSCipherSuite  ALL:!ADH:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv3:+EXP
TLSCACertificateFile /etc/ldap/certs/cacert.pem
TLSCertificateFile /etc/ldap/certs/servercrt.pem
TLSCertificateKeyFile /etc/ldap/certs/serverkey.pem
TLSVerifyClient never

######################################################################
# REPLICACAO
######################################################################
syncrepl rid=51
        provider=ldaps://ldap
        bindmethod=simple
        binddn="cn=replicator,dc=company"
        credentials=password
        searchbase="dc=company"
        schemachecking=off
        type=refreshAndPersist
        retry="30 30 600 72"

######################################################################
# Indices
######################################################################
index           cn                              pres,sub,eq
index           sn                              pres,sub,eq
index           uid                             pres,sub,eq
index           displayName                     pres,sub,eq
index           memberUid                       eq,subinitial
index           mail                            eq,subinitial
index           givenname                       eq,subinitial
index           uidNumber                       eq
index           gidNumber                       eq
index           entryUUID                       eq
index           sambaSID                        eq
index           sambaPrimaryGroupSID            eq
index           sambaDomainName                 eq
index           objectClass                     eq
index           sambaGroupType                  eq
index           sambaSIDList                    eq
index           uniqueMember                    eq
index           entryCSN                        eq

When the replication stops the log just shows:

Dec  8 15:55:09 mg slapd[6529]: syncrepl_entry: LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD)

Dec  8 15:55:09 mg slapd[6529]: bdb_idl_fetch_key: [7cdee34d]
Dec  8 15:55:09 mg slapd[6529]: send_ldap_result: err=0 matched="" text=""
Dec  8 15:55:09 mg slapd[6529]: syncrepl_entry: be_search (0)
Dec  8 15:55:09 mg slapd[6529]: syncrepl_entry: uid=pr0239$,ou=maquinas,dc=matriz,dc=company
Dec  8 15:55:09 mg slapd[6529]: do_syncrep2: LDAP_RES_SEARCH_RESULT
Dec  8 15:55:09 mg slapd[6529]: connection_get(39)

Note that the first line is saying LDAP_SYNC_ADD and not LDAP_SYNC_MODIFY once this user is already loaded.

Anyone can help us with this one?

Thanx in advance.

Gustavo