Hi,

I have one replication tool which makes some modifications in my OpenLDAP master. For some shitty reason, that tool tries to modify one dn with duplicated attributes. Here is the snippet of accesslog:

dn: reqStart=20170103135721.000411Z,cn=accesslog objectClass: auditModify reqStart: 20170103135721.000411Z reqEnd: 20170103135721.000413Z reqType: modify reqSession: 1184351 reqAuthzID: cn=manager,dc=br reqControls: {0}{2.16.840.1.113730.3.4.2} reqDN: ou=marili_advogados,ou=terceiros,cn=sistema,cn=entities,dc=sicredi,dc=c om,dc=br reqResult: 0 reqMod:: U2ljcmVkaU1lbW86PSBt77+9Hu+/veKdqu+/vTA0LjUyOC4yNzYvMDAwMS0wNg1BVi4gT UFSRUNIQUwgRkxPUklBTk8gUEVJWE9UWA== reqMod: SicrediEntidadePai:= ou=terceiros,cn=sistema,cn=entities,dc=sicredi,dc =com,dc=br reqMod: SicrediEntidadePai:= ou=terceiros,cn=sistema,cn=entities,dc=sicredi,dc =com,dc=br reqMod: entryCSN:= 20170103135721.874447Z#000000#000#000000 reqMod: modifiersName:= cn=manager,dc=br reqMod: modifyTimestamp:= 20170103135721Z reqEntryUUID: 61dfd779-5799-4988-927b-914e75d6ae90

As you can see, the attribute "SicrediEntidadePai" is modified two times with the same value, which results in syncrepl to stuck, as described in one of our slaves logs:

2017-01-03T19:14:21.043501-02:00 ds1openldap5p slapd[2245]: syncrepl_message_to_op: rid=000 mods check (SicrediEntidadePai: multiple values provided) 2017-01-03T19:14:21.043599-02:00 ds1openldap5p slapd[2245]: do_syncrepl: rid=000 rc 19 retrying 2017-01-03T19:15:21.039822-02:00 ds1openldap5p slapd[2245]: syncrepl_message_to_op: rid=000 mods check (SicrediEntidadePai: multiple values provided) 2017-01-03T19:15:21.039863-02:00 ds1openldap5p slapd[2245]: do_syncrepl: rid=000 rc 19 retrying

My workaround is remove the database on the slaves and let it to do a full replication.

I'm looking in the replication tool to fix that modification bug but meanwhile I have two questions about that:

1 - Why that modification happen with no problem in OpenLDAP master and stuck syncrepl? 2 - Should I fill an issue on ITS or this is working as expected? 3 - There is any other workaround for this case?

OpenLDAP: slapd 2.4.42

Thanks.

Matheus Eduardo Bonifácio Morais Analista de Infraestrutura de TI, Plataforma e Aplicações Confederação Sicredi

Centro Administrativo Sicredi - Porto Alegre +55 51 3358 7143

sicredi.com.br

[1474907760585_sicredilogo.png]

Esta mensagem é somente para uso do destinatário informado e pode conter informações privilegiadas, proprietárias ou privadas. Se você recebeu esta mensagem por engano, por favor, notifique o remetente imediatamente e apague a original. Qualquer outro uso deste e-mail é proibido.

This message is for the designated recipient only and may contain privileged, proprietary, or otherwise private information. If you have received it in error, please notify the sender immediately and delete the original. Any other use of the email by you is prohibited.