Hi list
I configured my 2 tests server to replicate with syncrepl using this website:
https://help.ubuntu.com/9.04/serverguide/C/openldap-server.html
It works well. If I create a new user on any servers it's immediately replicated to the other. However I have some error in the log files:
(these 2 messages appears every 10 seconds on the first server (vmlinux01))
Sep 22 11:53:56 vmlinux01 slapd[12072]: <= bdb_equality_candidates: (entryCSN) not indexed
Sep 22 11:53:56 vmlinux01 slapd[12072]: <= bdb_inequality_candidates: (entryCSN) not indexed
Sep 22 11:24:51 vmlinux02 slapd[10596]: do_syncrep2: rid=001 (-1) Can't contact LDAP server
Sep 22 11:24:51 vmlinux02 slapd[10596]: do_syncrepl: rid=001 retrying (4 retries left)
Also, when I configure the server to authenticate using LDAP (pam-auth-update) I can connect to the system using an LDAP account (say maxime) but look at the prompt and whoami result :
administrator@vmlinux01:~$ whoami
administrator
Do I need to create the users on both LDAP and Linux ?
Max
Maxime Gaudreault wrote:
I configured my 2 tests server to replicate with syncrepl using this website: [..] It works well. If I create a new user on any servers it's immediately replicated to the other. However I have some error in the log files:
(these 2 messages appears every 10 seconds on the first server (vmlinux01))
Sep 22 11:53:56 vmlinux01 slapd[12072]: <= bdb_equality_candidates: (entryCSN) not indexed
Sep 22 11:53:56 vmlinux01 slapd[12072]: <= bdb_inequality_candidates: (entryCSN) not indexed
These are warnings (not errors) indicating what they say. An LDAP client is searching for any unindexed attribute, here 'entryCSN' used with syncrepl. You can add this index to increase performance.
How do I add an index after populating the database? http://www.openldap.org/faq/data/cache/136.html
Sep 22 11:24:51 vmlinux02 slapd[10596]: do_syncrep2: rid=001 (-1) Can't contact LDAP server
Sep 22 11:24:51 vmlinux02 slapd[10596]: do_syncrepl: rid=001 retrying (4 retries left)
It seems your slave replica (temporarily?) could not connect to the master replica.
Ciao, Michael.
openldap-technical@openldap.org