Hi all
I was reading this post in openldap-technical forum.
I am in the process to install a full authenticate service here
using samba and openldap, my pdc and bdc are ldap based servers, and are in
different locations, using a router to connect them, then… a full master
ldap is needed in these two locations.
I have two ldap servers in mirror mode (in a virtual machines,
using vmware), these two servers are time synchronized using the same time
server.
When a update a ldap entry in one server, the data replicate fine,
but when I use the other, I have the following error in my logs.
Apr 29 11:50:15 srvped2master slapd[7377]: do_syncrep2:
cookie=rid=002,sid=002,csn=20090429165015.624045Z#000000#001#000000
Apr 29 11:50:15 srvped2master slapd[7377]: do_syncrep2: rid=002
CSN too old, ignoring 20090429165015.624045Z#000000#001#000000
The time is very difficult to maintain in sync when virtual
machines are in use, and Openldap servers are extremely sensitive to time lag.
Apparently this is a bug in ldap 2.4.11 and will be fixed in ldap
2.4.16
http://www.openldap.org/lists/openldap-bugs/200903/msg00202.html
Anyone could solve the problem?
Im using debian lenny
srvped2master:/etc/ldap# apt-cache policy slapd
slapd:
Installed: 2.4.11-1
Candidate: 2.4.11-1
Version table:
*** 2.4.11-1 0
500
http://ftp.us.debian.org lenny/main Packages
100
/var/lib/dpkg/status
This is my slapd.conf
#################
serverID 1
include
/etc/ldap/schema/core.schema
include
/etc/ldap/schema/cosine.schema
include
/etc/ldap/schema/nis.schema
include
/etc/ldap/schema/inetorgperson.schema
include
/etc/ldap/schema/samba.schema
include
/etc/ldap/schema/misc.schema
pidfile
/var/run/slapd/slapd.pid
argsfile
/var/run/slapd/slapd.args
loglevel 16384
modulepath /usr/lib/ldap
moduleload back_hdb
moduleload syncprov
sizelimit 500
tool-threads 1
backend hdb
database hdb
suffix
"dc=avhlima,dc=edu,dc=pe"
rootdn
"cn=admin,dc=avhlima,dc=edu,dc=pe"
directory
"/var/lib/ldap"
dbconfig set_cachesize 0 2097152 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
syncrepl rid=001
provider=ldap://192.168.4.8
type=refreshAndPersist
retry="60 +"
searchbase="dc=avhlima,dc=edu,dc=pe"
attrs="*,+"
bindmethod=simple
binddn="cn=admin,dc=avhlima,dc=edu,dc=pe"
credentials=XXXXXXXXXXXX
mirrormode on
index
objectClass eq
index
cn pres,sub,eq
index
sn pres,sub,eq
index uid
pres,sub,eq
index
displayName pres,sub,eq
index
uidNumber eq
index
gidNumber eq
index
memberUID eq
index
sambaSID eq
index
sambaPrimaryGroupSID eq
index
sambaDomainName eq
index
default sub
lastmod on
checkpoint 512 30
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
access to
attrs=userPassword,sambaLMPassword,sambaNTPassword,shadowLastChange
by
dn="cn=admin,dc=avhlima,dc=edu,dc=pe" write
by anonymous auth
by self write
by * none
access to dn.base="" by * read
access to *
by
dn="cn=admin,dc=avhlima,dc=edu,dc=pe" write
by * read
##########################
The diff between servers are only in:
serverID 2
syncrepl rid=002
provider=ldap://192.168.3.8
Thanx 4 your time
Victor