Re: (ITS#7426) contraints blocks syncreplication

[hyc@symas.com]

sascha.kuehndel@deka.de wrote:
> Full_Name: Sascha Kuehndel
> Version: 2.4.33 + ITS#7418
> OS: HP-UX 11.31
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (192.166.104.102)
>
>
> Hallo,
>
> the constraints seams to block the sync-replication.
>
> constraint_attribute dekanetZielgruppenDN uri
>    ldap:///ou=Zielgruppen,ou=dekanet,dc=dekager,dc=dekabank,dc=extern?entryDN?one?(objectClass=dekanetZielgruppe)
>    restrict=ldap:///ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern??one

Seems this is an improper config. If you already have constraints enforced on 
the provider, then only valid entries may be replicated, so constraints on the 
consumer are superfluous.

> the replication syncs the users in ou=Benutzer first, and later the groups  of
> ou=Zielgruppen.
> The be_add of the user failed in the consumer, until commenting out the
> constraint.
>
> here the relevant part of the log file
> 50c84eff syncrepl_message_to_entry: rid=002 DN:
> uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern, UUID: XXX-UUID
> 50c84eff syncrepl_entry: rid=002 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD)
> 50c84eff syncrepl_entry: rid=002 inserted UUID XXX-UUID
> 50c84eff syncrepl_entry: rid=002 be_search (0)
> 50c84eff syncrepl_entry: rid=002
> uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern
> 50c84f00 slap_queue_csn: queing 6000000000a1d9c0
> 20120926141541.717811Z#000000#002#000000
> 50c84f00 slap_graduate_commit_csn: removing 6000000012baa390
> 20120926141541.717811Z#000000#002#000000
> 50c84f00 null_callback : error code 0x13
> 50c84f00 syncrepl_entry: rid=002 be_add
> uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern (19)
> 50c84f00 syncrepl_entry: rid=002 be_add
> uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern failed (19)
> 50c84f00 do_syncrepl: rid=002 rc 19 retrying
>
>
> Greets,
> Sascha
>
>


-- 
   -- Howard Chu
   CTO, Symas Corp.           http://www.symas.com
   Director, Highland Sun     http://highlandsun.com/hyc/
   Chief Architect, OpenLDAP  http://www.openldap.org/project/