--- On Mon, 4/21/08, brad davison gh0t1@yahoo.com wrote:
From: brad davison gh0t1@yahoo.com Subject: Re: OpenLDAP: slave is not being updated by master and replog is empty To: brad@lucidcomputer.com, openldap-technical@openldap.org, "Quanah Gibson-Mount" quanah@zimbra.com Date: Monday, April 21, 2008, 8:29 AM --- On Fri, 4/18/08, Quanah Gibson-Mount quanah@zimbra.com wrote:
From: Quanah Gibson-Mount quanah@zimbra.com Subject: Re: OpenLDAP: slave is not being updated by
master and replog is empty
To: brad@lucidcomputer.com,
openldap-technical@openldap.org
Date: Friday, April 18, 2008, 9:37 PM --On Friday, April 18, 2008 10:39 AM -0700 brad
davison
gh0t1@yahoo.com wrote:
I am working in a test environment to construct a
SAMBA / LDAP domain for
windows clients. There is a PDC with OpenLDAP
server
2.3.35 and SAMBA
3.026 running on ubuntu server 7.10.
The PDC is functioning; I am able to create users
and
login with them, as
well as join workstations to the domain. The
slave
slapd was populated
with an output from an ldif file that was
exported
from the master via:
slapcat -l >> master.ldif
Interseting syntax, since the *option* to -l is a
file.
Why not just slapcat -l master.ldif?
I had entered the 'replica' line in the
master-slapd, and the updatedn
and updateref lines in the slave-slapd as stated
in
14.4 in the OpenLDAP
2.3 admin's guide. The 'openldap'
user has
rights to the replog file.
Problem 1) The master (dc01-ubuntu.example.local)
is
not updating the
replog file with either a success or failure.
Is slurpd running on the master? I will note that
slurpd
is deprecated with 2.3 (I.e., it is suggested that you DO NOT USE
IT).
It has been deleted from OpenLDAP 2.4. You should be using
syncrepl or
delta-syncrepl instead.
What options is slurpd running with if it is running?
Problem 2) The slave (bdc01-ubuntu.example.local)
is
not getting updates
from the master when changes occur.
See questions in comment #1.
--Quanah
--
Thank you for your reply.
Is slurpd running on the master? I will note that
slurpd
is deprecated with 2.3 (I.e., it is suggested that you DO NOT USE
IT).
It has been deleted from OpenLDAP 2.4. You should be using
syncrepl or
delta-syncrepl instead.
What options is slurpd running with if it is running?
Yes, slurpd is running on the master with the -f option as root user root 10258 0.0 0.0 12428 728 ? Ssl Apr18 0:00 slurpd -f /etc/ldap/slapd.conf
I was not aware that slurpd is being depreciated. I will stop the slurpd and remove the replica lines from the master and slave slapd.conf files and research more on syncrepl and delta-syncrepl.
Thank you
Is there a particular order that the overlay syncprov directive needs to be at? I added the following lines to my master slapd.conf (after removing the replica and replog entries):
overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100
under the 'database bdb' section, then further down, modified index for:
index objectClass,entryCNS,entryUUID eq
as the OpenLDAP Software 2.3 admin's guide suggested.
but when I run slapd on the master I get: -------------------------------- Starting OpenLDAP: slapd - failed. The operation failed but no output was produced. For hints on what went wrong please refer to the system's logfiles (e.g. /var/log/syslog) or try running the daemon in Debug mode like via "slapd -d 16383" (warning: this will create copious output).
Below, you can find the command line options used by this script to run slapd and slurpd. Do not forget to specify those options if you want to look to debugging output: slapd -g openldap -u openldap --------------------------------
so i ran the 'slapd -d 16383' and I get: ...... ...... line 72 (overlay syncprov) overlay "syncprov" not found /etc/ldap/slapd.conf: line 72: <overlay> handler exited with 1! slapd destroy: freeing system resources. slapd stopped. connections_destroy: nothing to destroy. ---------------------
____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ