consumer crashing provider

[Dick Visser <visser@terena.org>]

(first post)

Hi guys

I am trying to set-up a pair of directory servers. Both of them run
Ubuntu 8.04, which has OpenLDAP-2.4.9.

I started out with one server, configured that to suit my needs (store
UNIX and smb accounts), which works fine. Next thing is to set-up a
second 'slave' server.

After reading the docs, I decided to go for the syncrepl style
replication for our micro tree. Everything seems to work fine. If I
start the consumer it nicely pulls content from the provider.

Retrieving the whole tree with ldapsearch from both servers yields
exactly the same ldif. Great.

However, if I now change something on my main server a.k.a. provider
(f.i. change a password), the next time the consumers contacts the
provider, the provider crashes:

root@ldap:/etc/ldap# slapd -f slapd.conf -g openldap -u openldap  -d 15
[snip]
*** glibc detected *** slapd: free(): invalid size: 0xb676ef08 ***
======= Backtrace: =========
/lib/tls/i686/cmov/libc.so.6[0xb7c62a85]
/lib/tls/i686/cmov/libc.so.6(cfree+0x90)[0xb7c664f0]
/usr/lib/liblber-2.4.so.2(ber_memfree_x+0x4a)[0xb7f93b4a]
/usr/lib/ldap/syncprov-2.4.so.2[0xb787619a]
slapd(overlay_op_walk+0x34)[0x80da4e4]
slapd[0x80daaf7]
slapd(fe_op_search+0x313)[0x8078a73]
slapd(do_search+0x777)[0x80792e7]
slapd[0x807653f]
slapd[0x8076c36]
/usr/lib/libldap_r-2.4.so.2[0xb7fa4714]
/lib/tls/i686/cmov/libpthread.so.0[0xb7d4b4fb]
/lib/tls/i686/cmov/libc.so.6(clone+0x5e)[0xb7ccde5e]
======= Memory map: ========
Aborted


A slave server killing a master sort of defeats the whole purpose ;-)

Any ideas how to solve this?



If it makes any difference, here is the provider config:

include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include         /etc/ldap/schema/samba.schema
pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args
loglevel        4096
modulepath      /usr/lib/ldap
moduleload      back_hdb
moduleload      syncprov
sizelimit 5000
tool-threads 1
backend         hdb
database        hdb
suffix          "dc=terena,dc=org"
rootdn          "cn=Replication,dc=terena,dc=org"
directory       "/var/lib/ldap"
dbconfig set_cachesize 0 16777216 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
index objectClass,entryCSN,entryUUID eq
index cn                      pres,sub,eq
index sn                      pres,sub,eq
index uid                     pres,sub,eq
index displayName             pres,sub,eq
index uidNumber               eq
index gidNumber               eq
index memberUid               eq
index sambaSID                eq
index sambaPrimaryGroupSID    eq
index sambaDomainName         eq
index default                 sub
lastmod         on
checkpoint      512 30
overlay syncprov
syncprov-checkpoint 1 1
syncprov-sessionlog 100
access to
attrs=userPassword,shadowLastChange,sambaLMPassword,sambaNTPassword
        by dn="cn=admin,dc=terena,dc=org" write
        by dn="cn=smbadmin,dc=terena,dc=org" read
        by dn="cn=syncrepl,dc=terena,dc=org" read
        by anonymous auth
        by self write
        by * none
access to *
        by dn="cn=admin,dc=terena,dc=org" write
        by * read
access to dn.base="" by * read



And here is the consumer config:

include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include         /etc/ldap/schema/samba.schema
pidfile         /var/run/slapd/slapd.pid
argsfile        /var/run/slapd/slapd.args
loglevel        256
modulepath      /usr/lib/ldap
moduleload      back_hdb
sizelimit 500
tool-threads 1
backend         hdb
database        hdb
suffix          "dc=terena,dc=org"
rootdn          "cn=Replication,dc=terena,dc=org"
directory       "/var/lib/ldap"
dbconfig set_cachesize 0 2097152 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
index           objectClass,entryCSN,entryUUID eq
access to
attrs=userPassword,shadowLastChange,sambaLMPassword,sambaNTPassword
        by dn="cn=admin,dc=terena,dc=org" write
        by dn="cn=smbadmin,dc=terena,dc=org" read
        by anonymous auth
        by self write
        by * none
access to *
        by dn="cn=admin,dc=terena,dc=org" write
        by * read
access to dn.base="" by * read
syncrepl rid=000
        provider=ldap://ldap.terena.org:389
        type=refreshOnly
        interval=00:00:00:60
        retry="60 10 300 +"
        searchbase="dc=terena,dc=org"
        scope=sub
        attrs=*
        schemachecking=off
        bindmethod=simple
        binddn="cn=syncrepl,dc=terena,dc=org"
        credentials=hackme
updateref ldap://ldap.terena.org:389





-- 
Dick Visser
TERENA IT Support Officer

TERENA Secretariat
Singel 468 D, 1017 AW Amsterdam
The Netherlands
T +31 20 530 44 88 F +31 20 530 44 99
visser@terena.org | www.terena.org