On Fri, Apr 04, 2025 at 05:29:03AM +0000, Windl, Ulrich wrote:
Hi!
While setting up an OpenLDAP-2.5-based MMR configuration I had set up the master node, then dumped the config database, copied the LDIF to the other node. However when starting slapd, it failed with the message slapd[2734]: config error processing olcDatabase={0}config,cn=config: <olcMultiProvider> database is not a shadow
See also https://stackoverflow.com/q/6792212/6607497
The context of olcMultiProvider is: dn: olcDatabase={0}config,cn=config objectClass: olcDatabaseConfig olcDatabase: {0}config ... olcMultiProvider: TRUE
On the first node I had updated the config using this LDIF: dn: olcDatabase=${db},cn=config changetype: modify delete: olcMirrorMode olcMirrorMode: TRUE
add: olcMultiProvider olcMultiProvider: TRUE
Hi Ulrich, olcMirrorMode and olcMultiProvider are two names for the same attribute, you can get switched over just by slapcat+slapadd'ing the configuration.
So I don't understand why this won't work on the second node. Specifically I can restart the first node without an issue. The only difference is that the primary node has a patch against crashing on an invalid olcAuthzRegexp (I had reported).
Well can anybody explain what this message means?
It's saying you probably don't have an effective olcSyncrepl attribute on the database in question so it's not a "shadow" (doesn't replicate from anyone). This requirement will be softened somewhat in 2.7 (see ITS#9729).
Regards,