hi all,

sometimes my server a not in sync. because server ignoring entry:

do_syncrep2: rid=102 CSN too old, ignoring 20130923090023.266239Z#000000#002#000000

@(#) $OpenLDAP: slapd 2.4.33 (....)

4 server

host1 and host 2: only one database c=fr ( contain an ou=apps-ext )

host3 and host 4: tow database:

first ou=apps-ext (glued with c=fr ). writable by host1,2,3,4

second c=fr writable only by host1,2

ldap-int1 and ldap-int2 cn=config also into syncrepl mirrorMode

ldap-ext1 and ldap-ext2 cn=config also into syncrepl mirrorMode

Configuration:

grep serverID /etc/openldap/slapd.d/*

/etc/openldap/slapd.d/cn=config.ldif:olcServerID: 1 ldaps://ldap-int1.dom.fr

/etc/openldap/slapd.d/cn=config.ldif:olcServerID: 2 ldaps://ldap-int2.dom.fr

/etc/openldap/slapd.d/cn=config.ldif:olcServerID: 3 ldaps://ldap-ext1.vlandata.dom.fr

/etc/openldap/slapd.d/cn=config.ldif:olcServerID: 4 ldaps://ldap-ext2.vlandata.dom.fr

syncrepl:

ldap-int1 and ldap-int2 cn=config also into syncrepl

olcSyncrepl: {0}rid=101 provider=ldaps://ldap-int1.dom.fr binddn="uid=syncrepl

,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX sea

rchbase="c=fr" tls_reqcert=never type=refreshAndPersist interval=00:00:00:10

retry="5 5 300 +" timeout=1

olcSyncrepl: {1}rid=102 provider=ldaps://ldap-int2.cdoms.fr binddn="uid=syncrepl

,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX sea

rchbase="c=fr" tls_reqcert=never type=refreshAndPersist interval=00:00:00:10

retry="5 5 300 +" timeout=1

olcSyncrepl: {2}rid=103 provider=ldaps://ldap-ext2.vlandata.dom.fr binddn="uid

=syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XX

XXXX tls_reqcert=never searchbase="o=apps-ext,c=fr" type=refreshAndPersist r

etry="5 5 300 +" timeout=1

olcSyncrepl: {3}rid=104 provider=ldaps://ldap-ext1.vlandata.dom.fr binddn="uid

=syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXX

XXXX searchbase="o=apps-ext,c=fr" tls_reqcert=never type=refreshAndPersist r

etry="5 5 300 +" timeout=1

syncrepl host3 and host4:

database apps-ext:

olcSyncrepl: {0}rid=303 provider=ldaps://ldap-ext1.vlandata.dom.fr binddn="uid

=syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXX

XXXX searchbase="o=apps-ext,c=fr" tls_reqcert=never type=refreshAndPersist r

etry="5 5 300 +" timeout=1

olcSyncrepl: {1}rid=304 provider=ldaps://ldap-ext2.vlandata.dom.fr binddn="uid

=syncrepl,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXX

XXX searchbase="o=apps-ext,c=fr" tls_reqcert=never type=refreshAndPersist r

etry="5 5 300 +" timeout=1

database c=fr:

olcSyncrepl: {0}rid=201 provider=ldaps://ldap-int1.dom.fr binddn="uid=syncrepl

,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXXX sea

rchbase="c=fr" tls_reqcert=never type=refreshOnly interval=00:00:00:10 retry=

"5 5 300 +" timeout=1

olcSyncrepl: {1}rid=202 provider=ldaps://ldap-int2.dom.fr binddn="uid=syncrepl

,ou=system,ou=dom,o=domgroup,c=fr" bindmethod=simple credentials=XXXXX tls

_reqcert=never searchbase="c=fr" type=refreshOnly interval=00:00:00:10 retry=

"5 5 300 +" timeout=1

log message into ldap-int1:

ep 23 09:00:26 ldap-int1 slapd[30481]: do_syncrep2: rid=104 LDAP_RES_INTERMEDIATE - NEW_COOKIE

Sep 23 09:00:26 ldap-int1 slapd[30481]: do_syncrep2: rid=104 NEW_COOKIE: rid=104,sid=003,csn=20130304121522.188962Z#000000#000#000000;20130920094938.821063Z#000000#001#000000;20130923081114.470856Z#000000#002#000000;20130920094950.036431Z#000000#003#000000;20130912174047.679980Z#000000#004#000000;20130304131428.455916Z#000000#00b#000000;20130304125618.164164Z#000000#00c#000000

Sep 23 09:00:26 ldap-int1 slapd[30481]: do_syncrep2: rid=104 LDAP_RES_INTERMEDIATE - NEW_COOKIE

Sep 23 09:00:26 ldap-int1 slapd[30481]: do_syncrep2: rid=104 NEW_COOKIE: rid=104,sid=003,csn=20130304121522.188962Z#000000#000#000000;20130920094938.821063Z#000000#001#000000;20130923090023.733719Z#000000#002#000000;20130920094950.036431Z#000000#003#000000;20130912174047.679980Z#000000#004#000000;20130304131428.455916Z#000000#00b#000000;20130304125618.164164Z#000000#00c#000000

Sep 23 09:00:26 ldap-int1 slapd[30481]: slap_queue_csn: queing 0x7f3787471a90 20130923090023.733719Z#000000#002#000000

Sep 23 09:00:26 ldap-int1 slapd[30481]: slap_graduate_commit_csn: removing 0x7f37873baa10 20130923090023.733719Z#000000#002#000000

Sep 23 09:00:27 ldap-int1 slapd[30481]: syncprov_matchops: skipping original sid 002

Sep 23 09:00:27 ldap-int1 slapd[30481]: slap_graduate_commit_csn: removing 0x7f37803e9320 20130923090023.225026Z#000000#002#000000

Sep 23 09:00:27 ldap-int1 slapd[30481]: syncrepl_entry: rid=102 be_add cn=502257-dt-global-gridded-adt-ref,ou=affectations,ou=console,o=apps,c=fr (0)

Sep 23 09:00:27 ldap-int1 slapd[30481]: do_syncrep2: rid=102 cookie=rid=102,sid=002,csn=20130923090023.266239Z#000000#002#000000

Sep 23 09:00:27 ldap-int1 slapd[30481]: do_syncrep2: rid=102 CSN too old, ignoring 20130923090023.266239Z#000000#002#000000 (cn=502257-dt-med-gridded-sla-ref,ou=affectations,ou=console,o=apps,c=fr)

Sep 23 09:00:27 ldap-int1 slapd[30481]: do_syncrep2: rid=102 cookie=rid=102,sid=002,csn=20130923090023.278474Z#000000#002#000000

Sep 23 09:00:27 ldap-int1 slapd[30481]: do_syncrep2: rid=102 CSN too old, ignoring 20130923090023.278474Z#000000#002#000000 (cn=502257-dt-blacksea-alongtrack-sla-ref,ou=affectations,ou=console,o=apps,c=fr)

time sync

host1

ntpq> lpeers

remote refid st t when poll reach delay offset jitter

==============================================================================

*date.dom.fr 145.238.203.10 3 u 676 1024 377 1.592 0.284 0.018

+date2.dom.fr 145.238.203.10 3 u 295 1024 377 2.681 -0.410 0.326

host2

ntpq> lpeers

remote refid st t when poll reach delay offset jitter

==============================================================================

*date.dom.fr 145.238.203.10 3 u 954 1024 377 1.028 1.012 0.343

+date2.dom.fr 145.238.203.10 3 u 413 1024 377 2.171 0.098 0.606

does somebody see what is wrong .

thanks