On 14 Jan 2016, at 08:37 , BÖSCH Christian <boesch@fhv.at> wrote:


hi,

i have two openldap servers 2.4.43 on freebsd 10.2 with multimaster replication.
if i add on one node a dynamicobject, the other node dies immediatly.
has anybody an idea?

regards,chris

---

added this:
dn: uid=vkw-guest,ou=people,o=abc.net
sn: VKW Guest
objectClass: organizationalPerson
objectClass: person
objectClass: dynamicObject
objectClass: inetLocalMailRecipient
objectClass: inetOrgPerson
objectClass: top
uid: vkw-guest
cn: VKW Guest


the log says:
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: activity on 1 descriptor
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: activity on:
Jan 13 13:08:40 openldap2 slapd[75017]:  30r
Jan 13 13:08:40 openldap2 slapd[75017]: 
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: read activity on 30
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=6 active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=7 active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=8 active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=9 active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=10 active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: connection_get(30)
Jan 13 13:08:40 openldap2 slapd[75017]: connection_get(30): got connid=0
Jan 13 13:08:40 openldap2 slapd[75017]: =>do_syncrepl rid=021
Jan 13 13:08:40 openldap2 slapd[75017]: =>do_syncrep2 rid=021
Jan 13 13:08:40 openldap2 slapd[75017]: do_syncrep2: rid=021 cookie=rid=021,sid=001,csn=20160113120840.025550Z#000000#001#000000
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_message_to_entry: rid=021 DN: uid=vkw-guest,ou=people,o=abc.net, UUID: 2074bc1e-4e3a-1035-92a1-ed72d2e7074a
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPrettyNormal: <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPrettyNormal: <uid=vkw-guest,ou=people,o=abc.net>, <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: <cn=admin,o=xyz.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=Subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=Subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: <cn=Subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: <cn=subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD)
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_search
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_dn2entry("o=abc.net")
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_dn2id("o=abc.net")
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_dn2id: got id=0x1
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_decode:
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_decode
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: search access to "o=abc.net" "entry" requested
Jan 13 13:08:40 openldap2 slapd[75017]: <= root access granted
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: search access granted by manage(=mwrscxd)
Jan 13 13:08:40 openldap2 slapd[75017]: search_candidates: base="o=abc.net" (0x00000001) scope=2
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_filter_candidates
Jan 13 13:08:40 openldap2 slapd[75017]:  EQUALITY
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_equality_candidates (entryUUID)
Jan 13 13:08:40 openldap2 slapd[75017]: => key_read
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_idl_fetch_key: [5ec43656]
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_index_read: failed (-30798)
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_equality_candidates: id=0, first=0, last=0
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_filter_candidates: id=0 first=0 last=0
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_search_candidates: id=0 first=0 last=0
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_search: no candidates
Jan 13 13:08:40 openldap2 slapd[75017]: send_ldap_result: conn=-1 op=0 p=0
Jan 13 13:08:40 openldap2 slapd[75017]: send_ldap_result: err=0 matched="" text=""
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 be_search (0)
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 uid=vkw-guest,ou=people,o=abc.net
Jan 13 13:08:40 openldap2 slapd[75017]: slap_queue_csn: queueing 0x846348780 20160113120840.025550Z#000000#001#000000
Jan 13 13:08:40 openldap2 slapd[75017]: ==> unique_add <uid=vkw-guest,ou=people,o=abc.net>
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: manage access to "uid=vkw-guest,ou=people,o=abc.net" "entry" requested
Jan 13 13:08:40 openldap2 slapd[75017]: <= root access granted
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: manage access granted by manage(=mwrscxd)
Jan 13 13:08:40 openldap2 slapd[75017]: unique_add: administrative bypass, skipping
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: ndn: "ou=people,o=abc.net"
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: oc: "dynamicObject", at: "(null)"
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_dn2entry("ou=people,o=abc.net")
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_dn2id("ou=people,o=abc.net")
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_dn2id: got id=0x3
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_decode:
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_decode
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: found entry: "ou=people,o=abc.net"
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_get: failed to find objectClass dynamicObject
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_entry_get: rc=16


I suggest reading the above line where it clearly notes it has no knowledge of the dynamicObject objectClass. Looks like a failure to have consistent schema between nodes?

ok quanah, as you always mention to read the manuals carefully is quite a good idea…

       The  quick and dirty solution is to set schemacheck=off in the syncrepl
       configuration and, optionally, exclude the operational attributes  from
       replication, using

              syncrepl ...
                   exattrs=entryTtl,entryExpireTimestamp


thank you anyway!
chris


--Quanah