Hi Jonathan,<br><br>no, all my 4 systems are configured equally, same 
configuration file (except for little specifications of every single 
instance) on all of them. The only difference is OL version which is 
2.4.23 on this one, and 2.4.22 on others.<br>

<br>Could it be due to the order of directives in my configuration file?<br>This is the order of inclusion of my overlay directives:<br><br>- overlay_password_policy<br>- overlay_syncprov<br>- overlay_auditlog<br>- overlay_accesslog<br>


- overlay_sssvlv<br>- overlay_memberof<br><br>Thanks again<br><font color="#888888">Marco</font><br><br><div class="gmail_quote">On Tue, Sep 21, 2010 at 8:18 PM, Jonathan CLARKE <span dir="ltr">&lt;<a href="mailto:jonathan.clarke@normation.com">jonathan.clarke@normation.com</a>&gt;</span> wrote:<br>

<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">Hi Marco,<br>
<br>
Le 16/09/2010 13:07, Marco Pizzoli a écrit :<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
I came to this evidence in investigating an anomaly that I&#39;m having with<br>
my accesslog database.<br>
Symptom I was having was continuous high cpu spot. I suspected it was<br>
due to my accesslog database.<br>
<br>
- I made a slapcat of my entire log database.<br>
- I erased my log database<br>
- I tried a slapadd of my log database<br>
<br>
I had this problem:<br>
<br>
</blockquote></div>
...<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
90.2 k/s str2entry: invalid value for attributeType reqControls #0<br>
(syntax 1.3.6.1.4.1.4203.666.11.5.3.1)<br>
</blockquote></div>
...<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="im">
<br>
I went to that line and found this entry:<br>
<br></div>
dn: reqStart=20100913065628.000008Z,cn=log,dc=<a href="http://mycorp.it" target="_blank">mycorp.it</a> &lt;<a href="http://mycorp.it" target="_blank">http://mycorp.it</a>&gt;<br>
</blockquote><div class="im">
...<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
reqControls: {0}{1.3.6.1.4.1.4203.1.9.1.1 controlValue<br>
&quot;30440K0103043M7269643N<br>
  3030332M7369643N3030342M63736O3N32303130303931333036353130362O3932343735355K2<br>
  330303030303023303033233030303030300001PP&quot;}<br>
reqControls: {1}{2.16.840.1.113730.3.4.2 criticality TRUE}<br>
</blockquote></div>
...<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<br>
<br>
Can someone tell me why this entry result not accepted to my openldap<br>
system?<br>
I&#39;m using OL 2.4.23 with password policy overlay defined.<br>
The entry I posted is related to an access made by a specific<br>
syncrepl-user. Replica configured in mirror-mode.<br>
<br>
Other OL systems are 2.4.22.<br>
<br>
Deleting this entry and re-slapadding I had another similar problem.<br>
</blockquote></div>
...<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
542.3 k/s str2entry: invalid value for attributeType reqRespControls #0<br>
(syntax 1.3.6.1.4.1.4203.666.11.5.3.1)<br>
</blockquote></div>
...<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div class="im">
<br>
The entry affected is this one:<br></div>
dn: reqStart=20100913093021.000000Z,cn=log,dc=<a href="http://mycorp.it" target="_blank">mycorp.it</a> &lt;<a href="http://mycorp.it" target="_blank">http://mycorp.it</a>&gt;<br>
</blockquote>
...<div class="im"><br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
reqRespControls: {0}{1.3.6.1.4.1.42.2.27.8.5.1 controlValue &quot;3000&quot;}<br>
</blockquote>
<br></div>
Both errors seem to indicate that slapd doesn&#39;t recognize a LDAP control OID - in the first case the LDAP Content Sync control (syncrepl) (1.3.6.1.4.1.4203.1.9.1.1) and in the second the password policy (1.3.6.1.4.1.42.2.27.8.5.1).<br>


<br>
Could it be that the system you encounter this on does not have the syncprov and ppolicy overlays enabled, whereas your others do?<br>
<br>
Hope this helps,<br>
Jonathan<br>
-- <br>
==========================================<br>
Jonathan CLARKE<br>
------------------------------------------<br>
Normation<br>
44 rue Cauchy, 94110 Arcueil, France<br>
------------------------------------------<br>
Telephone:  +33 (0)1 83 62 26 96<br>
------------------------------------------<br>
Web:        <a href="http://www.normation.com/" target="_blank">http://www.normation.com/</a><br>
==========================================<br>
</blockquote></div><br><br clear="all"><br>-- <br>_________________________________________<br>Non è forte chi non cade, ma chi cadendo ha la forza di rialzarsi.<br>                    Jim Morrison<br>