Ok good to know! The issue I created occurred when deleting the group, which I believe is the original complaint in the ITS as well. So I will add individual membership deletes as a part of that test too.
--Quanah
On Dec 30, 2016, at 9:31 PM, Paul B. Henson henson@acm.org wrote:
On Fri, Dec 30, 2016 at 02:41:06PM -0800, Quanah Gibson-Mount wrote:
Well, it seems to be some sort of race condition.
Yes, I'd agree; probably also load dependent as I never triggered it on my dev systems which are mostly idle other than my test load. It only showed up on my prod systems which tend to have continuous load from various other things.
I did want to confirm that you see this on servers that are long running (I.e., they've been running for a long time, and had other group deletes that went through w/o issue during that time). If so, then I can modify the test to randomly add and delete groups as a part of the test, increasing the likelyhood of triggering the issue within the test.
I don't have too many deletions of group objects themselves in production, mostly just deletions of the members of groups. I didn't see any issues with group deletions in dev, or during some basic initial testing in prod. I'll go ahead and make a new test group, add some members to it, and then delete it and see what happens now that I've been running this code for about 3 weeks...
I didn't see any errors deleting a group, although there were these syncrepl messages that I don't believe used to show up:
Dec 30 21:23:29 themis slapd[2607]: syncrepl_message_to_op: rid=001 be_delete uid=ldaptest5,ou=group,dc=cpp,dc=edu (32) Dec 30 21:23:29 themis slapd[2607]: syncrepl_message_to_op: rid=003 be_delete uid=ldaptest5,ou=group,dc=cpp,dc=edu (32) Dec 30 21:23:29 themis slapd[2607]: syncrepl_message_to_op: rid=002 be_delete uid=ldaptest5,ou=group,dc=cpp,dc=edu (32)
The group and memberOf attributes are gone on all four servers, so other than noise in the logs I'm not sure what these messages meant.
On Sat, Dec 31, 2016 at 05:39:15PM -0600, Quanah Gibson-Mount wrote:
Ok good to know! The issue I created occurred when deleting the group, which I believe is the original complaint in the ITS as well. So I will add individual membership deletes as a part of that test too.
ITS 8444 indicates a full refresh occurs if an object maintained by memberOf is either added or deleted. I don't think I'm seeing that. Mark says his CPU use ramps up to 100% for a bit every time that happens. I don't think I'm having any issues with full refreshes, just duplicate operations. Although he says the full refresh appears to be occuring because of a duplicate operation. So it might be the same underlying bug just displaying different symptoms due to different configurations/load/update patterns...
openldap-technical@openldap.org