Hi,

I just upgraded our servers from Debian 11 to 12. I'm not sure if this is an upstream change, but slapd 2.5 on Debian 12 doesn't support the HDB and BDB backends, so the database needs to be migrated to LMDB. Unfortunately I neglected to check the backend in use for all instances. Our main slapd instance already used LMDB, but another instance, that's just getting a copy of that database through sync replication, was still using HDB. At first I only noticed an error during upgrade. I found a guide (https://sources.debian.org/src/openldap/2.5.13%2Bdfsg-5/debian/slapd.README.Debian/ line 255 following) to do the upgrade to 2.5.x if it fails, which showed me the error.

lt_dlopenext failed: (back_hdb) file not foundslapadd: could not add entry dn="cn=module{0},cn=config" (line=16): <olcModuleLoad> handler exited with 1
Closing DB...


So I followed the setps under "BDB/HDB backends removed: migrating to LMDB backend". But upon trying to restore the backup again, it just told me

slapadd: could not add entry dn="cn=config" (line=1):
Closing DB...

The first set of lines in cn\=config.ldif reads

dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
olcToolThreads: 1
structuralObjectClass: olcGlobal
entryUUID: 71b384b4-aca9-1032-883a-d9850217023f
creatorsName: cn=config
createTimestamp: 20130908080726Z
entryCSN: 20130908080726.757296Z#000000#000#000000
modifiersName: cn=config
modifyTimestamp: 20130908080726Z

So I'm not sure what it wants to tell me now. I already checked against the config of the main instance, made a few modifications, but the error message is the same. Here the modifications:

dn: cn=config
objectClass: olcGlobal
cn: config
olcArgsFile: /var/run/slapd/slapd.args
olcLogLevel: none
olcPidFile: /var/run/slapd/slapd.pid
olcToolThreads: 1
structuralObjectClass: olcGlobal
entryUUID: 71b384b4-aca9-1032-883a-d9850217023f
creatorsName: cn=config
createTimestamp: 20130908080726Z
olcTLSCACertificateFile: /etc/ssl/certs/xyz-chain.pem
olcTLSCertificateFile: /etc/ssl/certs/mail.domain.de.cert.pem
olcTLSCertificateKeyFile: /etc/ssl/private/mail.domain.de.private.pem
entryCSN: 20130908080726.757296Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=mail
modifyTimestamp: 20130908080726Z

Could anybody tell me what exactly the problem is?

Richard