--On Thursday, July 26, 2018 6:02 PM -0700 admin@genome.arizona.edu wrote:
Quanah Gibson-Mount wrote on 07/26/2018 01:54 PM:
a) Do you have a unique olcServerID set in cn=config for both masters?
Yes I thought I set that according to the guide. Actually just noticed in the guide that both ldifs use "olcServerID: 1" so perhaps that is a mistake? If I search for that variable on node1, I can see it in the config: slapd.d/cn=config.ldif:olcServerID: 1
I ran a transaction on node2 to set it to 2, and now it is showing up on node1: slapd.d/cn=config.ldif:olcServerID: 2
on node2 there is no setting for olcServerID, am just using 'grep -R olcServerID *' in the /etc/openldap/slapd.d directory
Are you replicating cn=config? If you are, the olcServerID value has to include a URI and be multi-valued. For MMR to function, it is mandatory that each have a unique olcServerID configured.
b) Have you made sure there is no olcUpdateRef attribute set?
It does not appear to be set on either node, am just using grep again in the /etc/openldap/slapd.d directory
Ok
c) What version of OpenLDAP are you running?
slapd 2.4.40 on both nodes.
That release is particularly old and known to have many replication related issues. I would strongly advise upgrading to the current release.
d) I would note that back-bdb is deprecated. You may want to investigate migrating to back-mdb.
Actually I'm about the 4th system admin to take over these machines and sadly have little knowledge of LDAP... so please bear with me... our config is maybe very messy! the "database is not a shadow" error, does it mean back-bdb does not support replication? If so, how do migrate everything to back-mdb?
Both backends support replication and the issue you're having is not related to this.
Unfortunately, without having a better idea of what your configuration is or what it's trying to achieve, it's difficult to help you further.
--Quanah
--
Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com