[Date Prev][Date Next]
Re: [JunkMail] (ITS#5393) syncrepl push based replication with back-ldap fails
> Full_Name: Emmanuel Duru
> Version: 2.3.39
> OS: Windows
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (22.214.171.124)
> I'm trying to set a directory architecture with a syncrepl push based
> replication, as (partly) stated in the admin guide, chapter 16.1.1.
> I have a provider slapd with bdb, an intermediate slapd with back-ldap, which
> points to a consumer slapd with bdb.
> First, I have to set an updateDN on the consumer slapd, else back-ldap gets a
> "no user modification allowed" error on operational attributes
> (structuralobjectclass, contextcsn) when it tries to update the consumer slapd
That is expected.
> (the admin guide says the opposite).
I guess the Admin Guide has a bug then. What exact section are you referring to?
> Then this does not work at all when modifying an entry, because back-ldap gets a
> "modify/delete: hasSubordinates: no such attribute" error when it tries to
> update the entry.
That's also expected, since hasSubordinates is a dynamically generated
operational attribute (and also read-only, as I recall). You need to exclude
any dynamically generated operational attributes from the syncrepl search.
E.g. 2.4's test045 specifically tests this scenario, and the syncrepl spec uses:
retry="5 5 300 5"
In general, while this is known to work in 2.3, you're better off using 2.4.
(We intentionally did not include test045 in 2.3...)
-- Howard Chu
Chief Architect, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/