Ctest2:/# grep -r -i readonly /etc/openldap/slapd.d/*

/etc/openldap/slapd.d/cn=config/olcDatabase={-1}frontend.ldif:olcReadOnly: FALSE /etc/openldap/slapd.d/cn=config/olcDatabase={0}config.ldif:olcReadOnly: FALSE /etc/openldap/slapd.d/cn=config/olcDatabase={1}mdb.ldif:olcReadOnly: FALSE /etc/openldap/slapd.d/cn=config/olcDatabase={2}monitor.ldif:olcReadOnly: FALSE /etc/openldap/slapd.d/cn=config.ldif:olcReadOnly: FALSE

OlcReadOnly=FALSE ?

Sent from my iPad

On Aug 29, 2023, at 3:25 PM, Marc Marc@f1-outsourcing.eu wrote:

I removed the synrepl from a ldap server. Now I am getting errors when deleting entries ldap_modify: Server is unwilling to perform (53) additional info: shadow context; no update referral I also tried adding this, but does not change anything.  I removed the synrepl from a ldap server. Now I am getting errors when deleting entries

ldap_modify: Server is unwilling to perform (53) additional info: shadow context; no update referral

I also tried adding this, but does not change anything.

dn: olcDatabase={0}config,cn=config changetype:modify add: olcMirrorMode olcMirrorMode: FALSE

I don't think it is the acl's as I was able to change logging level before, when it was a slave. However now I am also not able to update the logging level.

What config settings should I look at?

--On Tuesday, August 29, 2023 10:27 PM +0000 Marc Marc@f1-outsourcing.eu wrote:

...

I removed the synrepl from a ldap server. Now I am getting errors when deleting entries

ldap_modify: Server is unwilling to perform (53) additional info: shadow context; no update referral

I also tried adding this, but does not change anything.

dn: olcDatabase={0}config,cn=config changetype:modify add: olcMirrorMode olcMirrorMode: FALSE

I don't think it is the acl's as I was able to change logging level before, when it was a slave. However now I am also not able to update the logging level.

What config settings should I look at?

conn=1004 op=32 SEARCH RESULT tag=101 err=0 qtime=0.000062 etime=0.000498 nentries=0 text= conn=1004 op=33 DEL dn="xxxxxxxxxxxxxxxxxxxxxx,dc=local" conn=1004 op=33 RESULT tag=107 err=53 qtime=0.000040 etime=0.001071 text=shadow context; no update referral

a) Some config changes still require a server restart.

b) It sounds like it has no updateRef line configured? If this server is no longer a write node, why are you sending writes to it?

--Quanah

--On Wednesday, August 30, 2023 4:22 PM +0000 Marc Marc@f1-outsourcing.eu wrote:

...

a) Some config changes still require a server restart.

b) It sounds like it has no updateRef line configured? If this server is no longer a write node, why are you sending writes to it?

I was trying to remove the slave, make it standalone and remove some records for testing.

Was it a slave, or was it an MMR node? If it was a slave, you'll have to remove the olcUpdateRef configuration, and make sure readonly is false. If it wasn't an MMR node, I don't know why you would be messing with olcMirrorMode, since that's only for MMR configurations.

--Quanah

--On Wednesday, August 30, 2023 6:43 PM +0000 Marc Marc@f1-outsourcing.eu wrote:

...

...

...

a) Some config changes still require a server restart.

b) It sounds like it has no updateRef line configured? If this server

is

...

...

no longer a write node, why are you sending writes to it?

I was trying to remove the slave, make it standalone and remove some records for testing.

Was it a slave, or was it an MMR node?

I was using olcSyncrepl

That doesn't really answer the question. Syncrepl is used for replication, regardless of the node type.

...

it wasn't an MMR node, I don't know why you would be messing with olcMirrorMode, since that's only for MMR configurations.

Because at some point I was trying anything I could find on the internet.

Generally that's not a good way to go. I'd generally suggest doing some deep reading on the different replication modes in OpenLDAP and how all the difference pieces tie together.

--Quanah