Hello,
I have the following setup that gives me some issues at the moment. I have 2 servers running Fedora 10 with OpenLDAP 2.4.19 that are running in Mirrormode. The sync between those 2 servers works just fine.
Besides that we have 2 frontend servers that rely heavily on ldap for mail delivery and mail transfers. To make this workable we thought about creating a readonly replica on these servers and tell the sendmail to use the local ldap as primary. When we had an old version on these servers (I think 2.4.12) everything worked fine. We now upgraded all servers to 2.4.19 and the configuration moved to slapd.d format, and now it looks like those 2 servers don't see the updates on the mirrormode backend anymore.
I have to following config's, this was from before the migration to slapd.d:
================== master 1 ==================
overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 serverID 3 # # Configure a replication consumer # syncrepl rid=1 provider=ldap://server2:389 type=refreshAndPersist retry="60 10 300 +" interval=00:00:05:00 searchbase="dc=domain,dc=com" filter="(objectClass=*)" attrs="*" scope=sub schemachecking=off bindmethod=simple binddn="cn=syncrepl,dc=domain,dc=com" credentials=password
mirrormode on
================== master 2 ==================
overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 serverID 4 # # Configure a replication consumer # syncrepl rid=1 provider=ldap://server1:389 type=refreshAndPersist retry="60 10 300 +" interval=00:00:05:00 searchbase="dc=domain,dc=com" filter="(objectClass=*)" attrs="*" scope=sub schemachecking=off bindmethod=simple binddn="cn=syncrepl,dc=domain,dc=com" credentials=password
mirrormode on
=================== slaves ===================
overlay syncprov syncprov-checkpoint 100 10 # # Configure a replication consumer # syncrepl rid=1 provider=ldap://ldap:389 type=refreshOnly retry="60 1 120 1" interval=00:00:05:00 searchbase="dc=domain,dc=com" filter="(objectClass=*)" attrs="*" scope=sub schemachecking=off bindmethod=simple binddn="cn=syncrepl,dc=domain,dc=com" credentials=password
updateref ldap://ldap.svc.be.nl:389 updateref ldap://ldap.lan.domain.com:389
============================================
When I empty the DIT on a slave and start it again it gets the full DIT just fine and I checked this. But after that it is not updated anymore.
Does anyone see here some obvious things I'm missing in these slave or master configs?
Thanks a lot, Jan Hugo Prins
On 02/17/2010 02:49 PM, Jan Hugo Prins wrote:
Hello,
I have the following setup that gives me some issues at the moment. I have 2 servers running Fedora 10 with OpenLDAP 2.4.19 that are running in Mirrormode. The sync between those 2 servers works just fine.
Besides that we have 2 frontend servers that rely heavily on ldap for mail delivery and mail transfers. To make this workable we thought about creating a readonly replica on these servers and tell the sendmail to use the local ldap as primary. When we had an old version on these servers (I think 2.4.12) everything worked fine. We now upgraded all servers to 2.4.19 and the configuration moved to slapd.d format, and now it looks like those 2 servers don't see the updates on the mirrormode backend anymore.
I just did some more testing and I found some strange things. Removing a user from the backendcluster replicates to the frontend just fine. Changing something in an existing user doesn't replicate to the frontend. And creating a new user on the backend cluster doesn't replicate to the frontend either. So basicly deletions work fine, updates don't.
Does anyone have any clue here for me about what I'm missing?
Greetings, Jan Hugo Prins
Good afternoon, is their anyone here that can help me with this problem? I'm really in a bit of a loss here and am looking for some help in this.
Hello,
I have the following setup that gives me some issues at the moment. I have 2 servers running Fedora 10 with OpenLDAP 2.4.19 that are running in Mirrormode. The sync between those 2 servers works just fine.
Besides that we have 2 frontend servers that rely heavily on ldap for mail delivery and mail transfers. To make this workable we thought about creating a readonly replica on these servers and tell the sendmail to use the local ldap as primary. When we had an old version on these servers (I think 2.4.12) everything worked fine. We now upgraded all servers to 2.4.19 and the configuration moved to slapd.d format, and now it looks like those 2 servers don't see the updates on the mirrormode backend anymore.
I just did some more testing and I found some strange things. Removing a user from the backendcluster replicates to the frontend just fine. Changing something in an existing user doesn't replicate to the frontend. And creating a new user on the backend cluster doesn't replicate to the frontend either. So basicly deletions work fine, updates don't.
Does anyone have any clue here for me about what I'm missing?
Greetings, Jan Hugo Prins
Every usefull hint is very much appreciated.
Greetings, Jan Hugo Prins
openldap-technical@openldap.org
-
Jan Hugo Prins