[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: N-way multimaster

I'm top posting here for ease, but please keep replies *on list*.

Tell tail signs something isn't working:

"get_filter: unknown filter type=48"

And pay attention to your ACLs and rootdn.


<quote who="Miguel Jinez">
> Sorry
> Here the logs...
> Master A starting after the situation that cause the problem, masters B
> and
> C are working off
>
> root@tstlnxldap00:/root/ldap24/openldap-2.4.11/servers/slapd
> /usr/local/etc/openldap/slapd.conf: line 137: rootdn is always granted
> unlimited privileges.
> /usr/local/etc/openldap/slapd.conf: line 155: rootdn is always granted
> unlimited privileges.
> /usr/local/etc/openldap/slapd.conf: line 160: rootdn is always granted
> unlimited privileges.
> slapd starting
> slap_client_connect: URI=ldap://10.100.130.184 DN="cn=admin,dc=ar"
> ldap_sasl_bind_s failed (-1)
> slap_client_connect: URI=ldap://10.100.130.181 DN="cn=admin,dc=ar"
> ldap_sasl_bind_s failed (-1)
> do_syncrepl: rid=002 retrying (4 retries left)
> do_syncrepl: rid=001 retrying (4 retries left)
> conn=0 fd=24 ACCEPT from IP=10.100.130.185:1312 (IP=0.0.0.0:389)
> conn=0 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=0 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=0 op=0 RESULT tag=97 err=0 text=
> conn=0 op=1 SRCH base="dc=ar" scope=2 deref=0 filter="(objectClass=*)"
> conn=0 op=1 SRCH attr=* +
> conn=0 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=0 op=2 UNBIND
> conn=0 fd=24 closed
> conn=1 fd=24 ACCEPT from IP=10.250.1.31:34413 (IP=0.0.0.0:389)
> conn=1 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=1 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=1 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=1 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=1 op=2 UNBIND
> conn=1 fd=24 closed
> conn=2 fd=24 ACCEPT from IP=10.250.1.30:39831 (IP=0.0.0.0:389)
> conn=2 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=2 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=2 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=2 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=2 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=2 op=2 UNBIND
> conn=2 fd=24 closed
> slap_client_connect: URI=ldap://10.100.130.184 DN="cn=admin,dc=ar"
> ldap_sasl_bind_s failed (-1)
> do_syncrepl: rid=002 retrying (3 retries left)
> slap_client_connect: URI=ldap://10.100.130.181 DN="cn=admin,dc=ar"
> ldap_sasl_bind_s failed (-1)
> do_syncrepl: rid=001 retrying (3 retries left)
> ....
>
> Master B starts
>
> fd=26 ACCEPT from IP=10.250.1.31:35484 (IP=0.0.0.0:389)
> conn=0 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=0 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=0 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=0 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=0 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=0 op=2 UNBIND
> conn=0 fd=26 closed
> conn=1 fd=26 ACCEPT from IP=10.250.1.30:40925 (IP=0.0.0.0:389)
> conn=1 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=1 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=1 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=1 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=1 op=2 UNBIND
> conn=1 fd=26 closed
> slap_client_connect: URI=ldap://10.100.130.184 DN="cn=admin,dc=ar"
> ldap_sasl_bind_s failed (-1)
> do_syncrepl: rid=002 retrying (2 retries left)
> slap_client_connect: URI=ldap://10.100.130.184 DN="cn=admin,dc=ar"
> ldap_sasl_bind_s failed (-1)
> do_syncrepl: rid=002 retrying (1 retries left)
> conn=2 fd=26 ACCEPT from IP=10.250.1.31:35556 (IP=0.0.0.0:389)
> conn=2 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=2 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=2 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=2 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=2 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=2 op=2 UNBIND
> conn=2 fd=26 closed
> conn=3 fd=26 ACCEPT from IP=10.250.1.30:40997 (IP=0.0.0.0:389)
> conn=3 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=3 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=3 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=3 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=3 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=3 op=2 UNBIND
> conn=3 fd=26 closed
> ...
>
> Master C starts
>
>  root@tstlnxldap00:/root/ldap24/openldap-2.4.11/servers/slapd
> /usr/local/etc/openldap/slapd.conf: line 139: rootdn is always granted
> unlimited privileges.
> /usr/local/etc/openldap/slapd.conf: line 156: rootdn is always granted
> unlimited privileges.
> /usr/local/etc/openldap/slapd.conf: line 160: rootdn is always granted
> unlimited privileges.
> bdb_db_open: warning - no DB_CONFIG file found in directory
> /usr/local/var/access: (2).
> Expect poor performance for suffix "cn=accesslog".
> slapd starting
> conn=0 fd=27 ACCEPT from IP=10.250.1.31:36153 (IP=0.0.0.0:389)
> conn=0 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=0 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=0 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=0 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=0 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=0 op=2 UNBIND
> conn=0 fd=27 closed
> conn=1 fd=27 ACCEPT from IP=10.250.1.30:41586 (IP=0.0.0.0:389)
> conn=1 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=1 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=1 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=1 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=1 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=1 op=2 UNBIND
> conn=1 fd=27 closed
> conn=2 fd=27 ACCEPT from IP=10.250.1.31:36227 (IP=0.0.0.0:389)
> conn=2 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=2 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=2 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=2 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=2 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=2 op=2 UNBIND
> conn=2 fd=27 closed
> conn=3 fd=27 ACCEPT from IP=10.250.1.30:41657 (IP=0.0.0.0:389)
> conn=3 op=0 BIND dn="cn=admin,dc=ar" method=128
> conn=3 op=0 BIND dn="cn=admin,dc=ar" mech=SIMPLE ssf=0
> conn=3 op=0 RESULT tag=97 err=0 text=
> get_filter: unknown filter type=48
> conn=3 op=1 SRCH base="dc=ar" scope=1 deref=0 filter="(?=undefined)"
> conn=3 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text=
> conn=3 op=2 UNBIND
> conn=3 fd=27 closed
> ....
>
> 2008/7/30 Gavin Henry <ghenry@openldap.org>
>
>> Hi again,
>>
>> This isn't what I asked for:
>>
>> "Can we see your actual logs, not the accesslog ones after the test
>> when/if it fails."
>>
>> From a clean import from slapadd into *one* node, with the other nodes
>> untouched. Start them up and let them sync, or:
>>
>> slappadd into one node, slapcat the data once imported so it has the
>> correct CSN values, then slapadd that export into the other nodes, then
>> start them all up.
>>
>> Then try and deleting in like you originally posted and post the logs,
>> *not* the accesslog logs.
>>
>> Thanks.
>>
>> --
>> Kind Regards,
>>
>> Gavin Henry.
>> OpenLDAP Engineering Team.
>>
>> E ghenry@OpenLDAP.org
>>
>> Community developed LDAP software.
>>
>> http://www.openldap.org/project/
>>
>