Re: cn=config replication to consumer / slave servers

On 4/15/11 11:46 AM, Howard Chu wrote:

Quanah Gibson-Mount wrote:

...

--On Thursday, April 14, 2011 5:28 PM -0700 Christopher Strider Cook ccook@pandora.com wrote:

...

Alternately, I tried to setup a separate database cn=config_slave and have that snycrepl to the slave into cn=config... but that creates a naming missmatch.

Is there an approved practice to achieve this, or some other pointers on avenues to explore?

Use slapo-rwm to rewrite the cn=config_slave database to be cn=config on the replicas.

No, that never worked well. Use suffixmassage in the syncrepl config statement. (Added in 2.4.24)

Yes that looks like the right path.. I've just recompiled to gain this superpower... But:

So I've got a 'stub' cn=config setup with enough (I think) to get it booted and connecting to the master to syncrepl over the rest of the config. olcDatabase={0}config.ldif has I think a proper syncrepl line: olcSyncrepl: {0}rid=001 provider=ldaps://hostxxx.com bindmethod=simp le binddn="cn=admin,cn=config_slave" credentials=pass searchbase=" cn=config_slave" suffixmassage="cn=config" schemachecking=on type=refreshAndPersist retry="60 +"

Something is still not quite right. In the logs I see a few troubling messages and the local cn=config doesn't update.

Apr 15 16:29:38 ramones slapd[1475]: conn=-1 op=0: config_add_internal: DN="cn=config" already exists and Apr 15 16:31:39 ramones slapd[1475]: send_ldap_result: err=67 matched="" text="Use modrdn to change the entry name"

is this because the cn entry for dn: cn=config_slave doesn't get rewritten from cn: config_slave to cn: config by the suffixmassage?

Thanks

Full logs from a replication attempt below.

Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=8 active_threads=0 tvp=zero Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=9 active_threads=0 tvp=zero Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=10 active_threads=0 tvp=zero Apr 15 16:29:38 ramones slapd[1475]: =>do_syncrepl rid=001 Apr 15 16:29:38 ramones slapd[1475]: =>do_syncrep2 rid=001 Apr 15 16:29:38 ramones slapd[1475]: daemon: added 12r listener=(nil) Apr 15 16:29:38 ramones slapd[1475]: daemon: activity on 1 descriptor Apr 15 16:29:38 ramones slapd[1475]: daemon: activity on: Apr 15 16:29:38 ramones slapd[1475]: Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=8 active_threads=0 tvp=NULL Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=9 active_threads=0 tvp=NULL Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=10 active_threads=0 tvp=NULL Apr 15 16:29:38 ramones slapd[1475]: daemon: activity on 1 descriptor Apr 15 16:29:38 ramones slapd[1475]: daemon: activity on: Apr 15 16:29:38 ramones slapd[1475]: 12r Apr 15 16:29:38 ramones slapd[1475]: Apr 15 16:29:38 ramones slapd[1475]: daemon: read active on 12 Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=8 active_threads=0 tvp=NULL Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=9 active_threads=0 tvp=NULL Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=10 active_threads=0 tvp=NULL Apr 15 16:29:38 ramones slapd[1475]: connection_get(12) Apr 15 16:29:38 ramones slapd[1475]: connection_get(12): got connid=0 Apr 15 16:29:38 ramones slapd[1475]: =>do_syncrepl rid=001 Apr 15 16:29:38 ramones slapd[1475]: =>do_syncrep2 rid=001 Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] string='cn=config_slave' Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_rule_apply rule='(.*)cn=config_slave$' string='cn=config_slave' [1 pass(es)] Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] res={0,'cn=config'} Apr 15 16:29:38 ramones slapd[1475]: >>> dnPrettyNormal: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnPrettyNormal: <cn=config>, <cn=config> Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] string='cn=config_slave' Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_rule_apply rule='(.*)cn=config_slave$' string='cn=config_slave' [1 pass(es)] Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] res={0,'cn=config'} Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] string='cn=admin,cn=config' Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_rule_apply rule='(.*)cn=config_slave$' string='cn=admin,cn=config' [1 pass(es)] Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] res={0,'cn=admin,cn=config'} Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] string='cn=config_slave' Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_rule_apply rule='(.*)cn=config_slave$' string='cn=config_slave' [1 pass(es)] Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] res={0,'cn=config'} Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] string='cn=Subschema' Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_rule_apply rule='(.*)cn=config_slave$' string='cn=Subschema' [1 pass(es)] Apr 15 16:29:38 ramones slapd[1475]: ==> rewrite_context_apply [depth=1] res={0,'cn=Subschema'} Apr 15 16:29:38 ramones slapd[1475]: >>> dnPretty: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnPretty: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: >>> dnNormalize: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnNormalize: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: >>> dnPretty: <cn=admin,cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnPretty: <cn=admin,cn=config> Apr 15 16:29:38 ramones slapd[1475]: >>> dnNormalize: <cn=admin,cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnNormalize: <cn=admin,cn=config> Apr 15 16:29:38 ramones slapd[1475]: >>> dnPretty: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnPretty: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: >>> dnNormalize: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: <<< dnNormalize: <cn=config> Apr 15 16:29:38 ramones slapd[1475]: >>> dnPretty: <cn=Subschema> Apr 15 16:29:38 ramones slapd[1475]: <<< dnPretty: <cn=Subschema> Apr 15 16:29:38 ramones slapd[1475]: >>> dnNormalize: <cn=Subschema> Apr 15 16:29:38 ramones slapd[1475]: <<< dnNormalize: <cn=subschema> Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 inserted UUID 9531bb2c-d970-102f-98bd-9352bfe36c1e Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "cn=config" "entry" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: EQUALITY Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "cn=config" "entryUUID" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 5 Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: EQUALITY Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "cn=module{0},cn=config" "entryUUID" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 5 Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: EQUALITY Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "cn=schema,cn=config" "entryUUID" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 5 Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: EQUALITY Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "olcBackend={0}hdb,cn=config" "entryUUID" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 5 Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: EQUALITY Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "olcDatabase={-1}frontend,cn=config" "entryUUID" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 5 Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: EQUALITY Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "olcDatabase={0}config,cn=config" "entryUUID" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 5 Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: conn=-1 op=0 p=0 Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: err=0 matched="" text="" Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 be_search (0) Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 cn=config Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: add access to "cn=config" "entry" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: add access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= acl_access_allowed: granted to database root Apr 15 16:29:38 ramones slapd[1475]: oc_check_required entry (cn=config), objectClass "olcGlobal" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "objectClass" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "cn" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcArgsFile" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcPidFile" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcToolThreads" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcTLSCACertificateFile" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcTLSCertificateFile" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcTLSCertificateKeyFile" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcTLSVerifyClient" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "structuralObjectClass" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "entryUUID" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "creatorsName" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "createTimestamp" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "olcLogLevel" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "entryCSN" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "modifiersName" Apr 15 16:29:38 ramones slapd[1475]: oc_check_allowed type "modifyTimestamp" Apr 15 16:29:38 ramones slapd[1475]: conn=-1 op=0: config_add_internal: DN="cn=config" already exists Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: conn=-1 op=0 p=0 Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: err=68 matched="" text="" Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 be_add cn=config (68) Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "cn=config" "entry" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: => test_filter Apr 15 16:29:38 ramones slapd[1475]: PRESENT Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access to "cn=config" "objectClass" requested Apr 15 16:29:38 ramones slapd[1475]: <= root access granted Apr 15 16:29:38 ramones slapd[1475]: => access_allowed: search access granted by manage(=mwrscxd) Apr 15 16:29:38 ramones slapd[1475]: <= test_filter 6 Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: conn=-1 op=0 p=0 Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: err=0 matched="" text="" Apr 15 16:29:38 ramones slapd[1475]: <= acl_access_allowed: granted to database root Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: conn=-1 op=0 p=0 Apr 15 16:29:38 ramones slapd[1475]: send_ldap_result: err=67 matched="" text="Use modrdn to change the entry name" Apr 15 16:29:38 ramones slapd[1475]: null_callback : error code 0x43 Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 be_modify cn=config (67) Apr 15 16:29:38 ramones slapd[1475]: syncrepl_entry: rid=001 be_modify failed (67) Apr 15 16:29:38 ramones slapd[1475]: connection_get(12) Apr 15 16:29:38 ramones slapd[1475]: connection_get(12): got connid=0 Apr 15 16:29:38 ramones slapd[1475]: daemon: removing 12 Apr 15 16:29:38 ramones slapd[1475]: do_syncrepl: rid=001 rc 67 retrying Apr 15 16:29:38 ramones slapd[1475]: daemon: activity on 1 descriptor Apr 15 16:29:38 ramones slapd[1475]: daemon: activity on: Apr 15 16:29:38 ramones slapd[1475]: Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=8 active_threads=0 tvp=zero Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=9 active_threads=0 tvp=zero Apr 15 16:29:38 ramones slapd[1475]: daemon: epoll: listen=10 active_threads=0 tvp=zero