problems replicating deleted entries after slave comes up. - openldap-software

23 Apr 2010


      Hello,
I'm having problem with 2 OpenLDAP (ver 2.4.21) servers acting as "master"
and "slave" using "refresh and persist" synchronization.
When both servers are up, all changes get replicated (including deletes),
however when slave is down and objects get deleted on master, they are not
deleted on the slave after it comes up.
Also, an interesting issue I noticed, deleting object on master doesn't
change the servers contextCSN, so this could be related to the problem I
have.
What can be done about this situation ?
Configs follow:
Master:
dn: cn=module{0}
objectClass: olcModuleList
cn: module{0}
olcModuleLoad: {0}syncprov.la
olcModuleLoad: {1}memberof.la
structuralObjectClass: olcModuleList
creatorsName: cn=config
entryUUID: b4dec246-8d67-102d-9827-
65d8858906d8
createTimestamp: 20090212154358Z
entryCSN: 20090212154358.261980Z#000000#001#000000
modifiersName: cn=config
modifyTimestamp: 20090212154358Z
dn: olcOverlay={1}syncprov
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: {1}syncprov
olcSpSessionlog: 100
entryUUID: ad98aace-8b05-102d-8b73-fd81f30554e6
creatorsName: cn=config
createTimestamp: 20090209145713Z
structuralObjectClass: olcSyncProvConfig
olcSpCheckpoint: 100 1
entryCSN: 20091104130358.860872Z#000000#001#000000
modifiersName: cn=config
modifyTimestamp: 20091104130358Z
dn: cn=config
objectClass: olcGlobal
cn: config
olcConfigFile: slapd.conf.1
olcConfigDir: slapd.d
olcArgsFile: /var/run/openldap/slapd.args
olcAttributeOptions: lang-
olcConcurrency: 0
olcConnMaxPending: 100
olcConnMaxPendingAuth: 1000
olcGentleHUP: FALSE
olcIdleTimeout: 0
olcIndexSubstrIfMaxLen: 4
olcIndexSubstrIfMinLen: 2
olcIndexSubstrAnyLen: 4
olcIndexSubstrAnyStep: 2
olcIndexIntLen: 4
olcLocalSSF: 71
olcPidFile: /var/run/openldap/slapd.pid
olcReadOnly: FALSE
olcReverseLookup: FALSE
olcSaslSecProps: noplain,noanonymous
olcSockbufMaxIncoming: 262143
olcSockbufMaxIncomingAuth: 16777215
olcThreads: 16
olcTLSCRLCheck: none
olcTLSVerifyClient: never
olcToolThreads: 1
structuralObjectClass: olcGlobal
creatorsName: cn=config
entryUUID: b4deb404-8d67-102d-9826-65d8858906d8
createTimestamp: 20090212154358Z
olcSaslHost: ldap-test1.carina.griddynamics.net
olcLogLevel: 0
olcAuthzPolicy: to
olcAuthzRegexp: {0}uid=([^@]*)[@,].*cn=digest-md5,cn=auth
ldap:///dc=griddynam
 ics,dc=net??sub?(uid=$1)
olcSizeLimit: 10000
olcServerID: 1 ldap://ldap-test1.carina.griddynamics.net
entryCSN: 20091121171118.965511Z#000000#002#000000
modifiersName: cn=config
modifyTimestamp: 20091121171118Z
contextCSN: 20100121080100.534901Z#000000#001#000000
dn: olcDatabase={2}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {2}bdb
olcDbDirectory: /var/lib/ldap/griddynamics.net
olcSuffix: dc=griddynamics,dc=net
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=Manager,dc=griddynamics,dc=net
olcMonitoring: TRUE
olcDbDirtyRead: FALSE
olcDbLinearIndex: FALSE
olcDbMode: 384
olcDbSearchStack: 16
olcDbShmKey: 0
olcDbCacheFree: 1
olcDbDNcacheSize: 0
entryUUID: acc152ea-8b05-102d-8b71-fd81f30554e6
creatorsName: cn=config
createTimestamp: 20090209145711Z
structuralObjectClass: olcBdbConfig
olcRootPW:: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
olcAccess: {0}to
attrs=userPassword,userPKCS12,sambaLMPassword,sambaNTPassword
   by sockurl.regex="^ldapi:///$" write by
group.exact="cn=noc,ou=groups,dc=gr
 iddynamics,dc=net" write  by self write  by anonymous auth
olcAccess: {1}to attrs=shadowLastChange  by sockurl.regex="^ldapi:///$"
write
  by group.exact="cn=noc,ou=groups,dc=griddynamics,dc=net"  write  by
self wri
 te  by * read
olcAccess: {2}to *  by sockurl.regex="^ldapi:///$" write  by
group.exact="cn=n
 oc,ou=groups,dc=griddynamics,dc=net" write  by self write  by * read
olcDbIndex: default eq
olcDbIndex: objectClass,entryUUID,entryCSN
olcDbIndex: cn pres,eq,sub
olcDbIndex: uid pres,eq,sub
olcDbIndex: uidNumber pres,eq
olcDbIndex: gidNumber pres,eq
olcDbIndex: memberOf pres,eq
olcDbIndex: ou pres,eq,sub
olcDbIndex: mail pres,eq,sub
olcDbIndex: loginShell pres,eq
olcDbIndex: sn pres,eq,sub
olcDbIndex: givenName pres,eq,sub
olcDbIndex: memberUid pres,eq
olcDbIndex: nisMapName pres,eq,sub
olcDbIndex: nisMapEntry pres,eq,sub
olcDbIndex: uniqueMember pres,eq
olcDbIndex: gosaObject pres,eq
olcDbIndex: zoneName pres,eq
olcDbIndex: relativeDomainName pres,eq
olcDbIndex: member pres,eq
olcDbIndex: dhcpPrimaryDN pres,eq
olcDbIndex: dhcpSecondaryDN pres,eq
olcDbIndex: dhcpServerDN  pres,eq
olcDbIndex: dhcpFailOverPeerDN   pres,eq
olcDbIndex: dhcpHWAddress pres,eq
olcDbNoSync: TRUE
olcDbCheckpoint: 1024 5
olcDbCacheSize: 5000
olcDbIDLcacheSize: 5000
olcSyncrepl: {0}rid=001
provider=ldap://ldap-test1.carina.griddynamics.net bindmetho
 d=simple timeout=1 network-timeout=0
binddn="cn=manager,dc=griddynamics,dc=ne
 t" credentials="xxxxxxxxxxx" starttls=no filter="(objectclass=*)"
searchbase="dc
 =griddynamics,dc=net" scope=sub schemachecking=off
type=refreshAndPersist ret
 ry="10 +"
olcDbConfig: {0}set_flags DB_LOG_AUTOREMOVE
olcDbConfig: {1}set_cachesize 0 33554432 0
entryCSN: 20091121172900.646924Z#000000#001#000000
modifiersName: cn=config
modifyTimestamp: 20091121172900Z
Slave:
dn: cn=module{0}
objectClass: olcModuleList
cn: module{0}
olcModuleLoad: {0}syncprov.la
olcModuleLoad: {1}memberof.la
structuralObjectClass: olcModuleList
creatorsName: cn=config
entryUUID: b4dec246-8d67-102d-9827-65d8858906d8
createTimestamp: 20090212154358Z
entryCSN: 20090212154358.261980Z#000000#001#000000
modifiersName: cn=config
modifyTimestamp: 20090212154358Z
dn: olcOverlay={1}syncprov
objectClass: olcOverlayConfig
objectClass: olcSyncProvConfig
olcOverlay: {1}syncprov
olcSpSessionlog: 100
entryUUID: ad98aace-8b05-102d-8b73-fd81f30554e6
creatorsName: cn=config
createTimestamp: 20090209145713Z
structuralObjectClass: olcSyncProvConfig
olcSpCheckpoint: 100 1
entryCSN: 20091104130358.860872Z#000000#001#000000
modifiersName: cn=config
modifyTimestamp: 20091104130358Z
dn: cn=config
objectClass: olcGlobal
cn: config
olcConfigFile: slapd.conf.1
olcConfigDir: slapd.d
olcArgsFile: /var/run/openldap/slapd.args
olcAttributeOptions: lang-
olcConcurrency: 0
olcConnMaxPending: 100
olcConnMaxPendingAuth: 1000
olcGentleHUP: FALSE
olcIdleTimeout: 0
olcIndexSubstrIfMaxLen: 4
olcIndexSubstrIfMinLen: 2
olcIndexSubstrAnyLen: 4
olcIndexSubstrAnyStep: 2
olcIndexIntLen: 4
olcLocalSSF: 71
olcPidFile: /var/run/openldap/slapd.pid
olcReadOnly: FALSE
olcReverseLookup: FALSE
olcSaslSecProps: noplain,noanonymous
olcSockbufMaxIncoming: 262143
olcSockbufMaxIncomingAuth: 16777215
olcThreads: 16
olcTLSCRLCheck: none
olcTLSVerifyClient: never
olcToolThreads: 1
structuralObjectClass: olcGlobal
creatorsName: cn=config
entryUUID: b4deb404-8d67-102d-9826-65d8858906d8
createTimestamp: 20090212154358Z
olcSaslHost: ldap-test1.carina.griddynamics.net
olcLogLevel: 0
olcAuthzPolicy: to
olcAuthzRegexp: {0}uid=([^@]*)[@,].*cn=digest-md5,cn=auth
ldap:///dc=griddynam
 ics,dc=net??sub?(uid=$1)
olcSizeLimit: 10000
olcServerID: 1 ldap://ldap-test1.carina.griddynamics.net
entryCSN: 20091121171118.965511Z#000000#002#000000
modifiersName: cn=config
modifyTimestamp: 20091121171118Z
contextCSN: 20100121080100.534901Z#000000#001#000000
dn: olcDatabase={2}bdb
objectClass: olcDatabaseConfig
objectClass: olcBdbConfig
olcDatabase: {2}bdb
olcDbDirectory: /var/lib/ldap/griddynamics.net
olcSuffix: dc=griddynamics,dc=net
olcLastMod: TRUE
olcMaxDerefDepth: 15
olcReadOnly: FALSE
olcRootDN: cn=Manager,dc=griddynamics,dc=net
olcMonitoring: TRUE
olcDbDirtyRead: FALSE
olcDbLinearIndex: FALSE
olcDbMode: 384
olcDbSearchStack: 16
olcDbShmKey: 0
olcDbCacheFree: 1
olcDbDNcacheSize: 0
entryUUID: acc152ea-8b05-102d-8b71-fd81f30554e6
creatorsName: cn=config
createTimestamp: 20090209145711Z
structuralObjectClass: olcBdbConfig
olcRootPW:: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
olcAccess: {0}to
attrs=userPassword,userPKCS12,sambaLMPassword,sambaNTPassword
   by sockurl.regex="^ldapi:///$" write by
group.exact="cn=noc,ou=groups,dc=gr
 iddynamics,dc=net" write  by self write  by anonymous auth
olcAccess: {1}to attrs=shadowLastChange  by sockurl.regex="^ldapi:///$"
write
  by group.exact="cn=noc,ou=groups,dc=griddynamics,dc=net"  write  by
self wri
 te  by * read
olcAccess: {2}to *  by sockurl.regex="^ldapi:///$" write  by
group.exact="cn=n
 oc,ou=groups,dc=griddynamics,dc=net" write  by self write  by * read
olcDbIndex: default eq
olcDbIndex: objectClass,entryUUID,entryCSN
olcDbIndex: cn pres,eq,sub
olcDbIndex: uid pres,eq,sub
olcDbIndex: uidNumber pres,eq
olcDbIndex: gidNumber pres,eq
olcDbIndex: memberOf pres,eq
olcDbIndex: ou pres,eq,sub
olcDbIndex: mail pres,eq,sub
olcDbIndex: loginShell pres,eq
olcDbIndex: sn pres,eq,sub
olcDbIndex: givenName pres,eq,sub
olcDbIndex: memberUid pres,eq
olcDbIndex: nisMapName pres,eq,sub
olcDbIndex: nisMapEntry pres,eq,sub
olcDbIndex: uniqueMember pres,eq
olcDbIndex: gosaObject pres,eq
olcDbIndex: zoneName pres,eq
olcDbIndex: relativeDomainName pres,eq
olcDbIndex: member pres,eq
olcDbIndex: dhcpPrimaryDN pres,eq
olcDbIndex: dhcpSecondaryDN pres,eq
olcDbIndex: dhcpServerDN  pres,eq
olcDbIndex: dhcpFailOverPeerDN   pres,eq
olcDbIndex: dhcpHWAddress pres,eq
olcDbNoSync: TRUE
olcDbCheckpoint: 1024 5
olcDbCacheSize: 5000
olcDbIDLcacheSize: 5000
olcSyncrepl: {0}rid=001
provider=ldap://ldap-test1.carina.griddynamics.net bindmetho
 d=simple timeout=1 network-timeout=0
binddn="cn=manager,dc=griddynamics,dc=ne
 t" credentials="xxxxxxxxxxx" starttls=no filter="(objectclass=*)"
searchbase="dc
 =griddynamics,dc=net" scope=sub schemachecking=off
type=refreshAndPersist ret
 ry="10 +"
olcDbConfig: {0}set_flags DB_LOG_AUTOREMOVE
olcDbConfig: {1}set_cachesize 0 33554432 0
entryCSN: 20091121172900.646924Z#000000#001#000000
modifiersName: cn=config
modifyTimestamp: 20091121172900Z