2013/5/30 Quanah Gibson-Mount quanah@zimbra.com:
--On Thursday, May 30, 2013 11:39 AM +0200 Meike Stone meike.stone@googlemail.com wrote:
Hello,
is it possible to use a ldif-backup with operation attributes (ldapsearch ... '+' '*') with slapadd, to save the operation attributes, if no slapcat backup is available? Are there any concerns?
If you can't get a slapcat backup, how would you get a ldapsearch backup?
A seconds reason, why I try to prevent using slapcat on a productive system is:
======================================================= slapd[4812]: bdb(ou=root): PANIC: Permission denied slapd[4812]: bdb(ou=root): DB_ENV->log_newfh: 15752: DB_RUNRECOVERY: Fatal error, run database recovery slapd[4812]: bdb(ou=root): txn_checkpoint: failed to flush the buffer cache: DB_RUNRECOVERY: Fatal error, run database recover slapd[4812]: bdb(ou=root): PANIC: fatal region error detected; run recovery slapd[4812]: null_callback : error code 0x50 slapd[4812]: syncrepl_updateCookie: rid=001 be_modify failed (80) slapd[4812]: do_syncrepl: rid=001 rc 80 retrying (4 retries left) =======================================================
This message I got today on a productive system while getting a ldif via slapcat for setting up an syncrepl slave. This shouldn happen, slapcat (8) manpage tells:
"For some backend types, your slapd(8) should not be running (at least, not in read-write mode) when you do this to ensure consistency of the database. *It is always safe to run slapcat with the slapd-bdb(5)*, slapd-hdb(5), and slapd-null(5) backends."
So using ldapsearch is more reliable for me ...
Kindly regards Meike
Meike Stone wrote:
A seconds reason, why I try to prevent using slapcat on a productive system is:
======================================================= slapd[4812]: bdb(ou=root): PANIC: Permission denied slapd[4812]: bdb(ou=root): DB_ENV->log_newfh: 15752: DB_RUNRECOVERY: Fatal error, run database recovery slapd[4812]: bdb(ou=root): txn_checkpoint: failed to flush the buffer cache: DB_RUNRECOVERY: Fatal error, run database recover slapd[4812]: bdb(ou=root): PANIC: fatal region error detected; run recovery slapd[4812]: null_callback : error code 0x50 slapd[4812]: syncrepl_updateCookie: rid=001 be_modify failed (80) slapd[4812]: do_syncrepl: rid=001 rc 80 retrying (4 retries left) =======================================================
If you ever get "Permission denied" there's something wrong with ownership/permissions of your slapd setup or slapcat process. You should immediately fix it.
Ciao, Michael.
If you ever get "Permission denied" there's something wrong with ownership/permissions of your slapd setup or slapcat process. You should immediately fix it.
Yes, slapd runs under user "ldap" and I used slapcat as root, but slapcat shouldn't change permissions or write any things? If so, there should an explicit note in the manual page appended to the sentence "..It is always safe to run slapcat with the slapd-bdb(5).." ?
Kindly regards
Meike
openldap-technical@openldap.org