Issue 7474 - memberOf and full syncreplication
Summary: memberOf and full syncreplication
Status: VERIFIED FIXED
Alias: None
Product: OpenLDAP
Classification: Unclassified
Component: slapd (show other issues)
Version: 2.4.33
Hardware: All All
: --- normal
Target Milestone: ---
Assignee: OpenLDAP project
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-12-14 08:32 UTC by marco.pizzoli@gmail.com
Modified: 2017-04-03 17:21 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this issue.
Description marco.pizzoli@gmail.com 2012-12-14 08:32:33 UTC
Full_Name: Marco Pizzoli
Version: 2.4.33
OS: Linux
URL: ftp://ftp.openldap.org/incoming/
Submission from: (NULL) (194.11.209.11)


Hi,
I think this could be considered an RFE.

During a full syncreplication I can't populate the memberOf attribute of some
entries because they are not (yet) present in the replicated tree.

The error is quite clear by looking at the logs during the full
syncreplication.,

"conn=-1 op=0: memberof_value_modify DN=<my_user_DN> add memberOf=<my_group_DN>
failed err=32

The problem doesn't occur on all user entries, because some of them are
replicated before the group which include them (as member, of course).

I would like to be assured that a full sync-replication can go smooth by
populating the memberOf attribute on all entries.

Thanks in advance
Marco
Comment 1 Quanah Gibson-Mount 2017-04-03 17:20:50 UTC
Hello,

As noted in the slapo-memberof(5) man page, it is unsafe for use with 
replication.

See also <http://www.openldap.org/its/index.cgi/?findid=8613> for ways in 
which to replicate memberOf functionality in a replication safe manner 
using slapo-dynlist.

This ITS will be closed.

Regards,
Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>


Comment 2 OpenLDAP project 2017-04-03 17:21:00 UTC
See http://www.openldap.org/its/index.cgi/?findid=8613
Comment 3 Quanah Gibson-Mount 2017-04-03 17:21:00 UTC
changed notes
changed state Open to Closed