[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: slapd dies

To: BÖSCH Christian <boesch@fhv.at>, Quanah Gibson-Mount <quanah@zimbra.com>
Subject: Re: slapd dies
From: Howard Chu <hyc@symas.com>
Date: Thu, 14 Jan 2016 09:11:02 +0000
Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
In-reply-to: <FFDF2E62-8C7C-42C8-9F04-267A3BA4125D@fhv.at>
References: <744CA2FF-24F2-45A8-B6D3-5EEBA0E71D6B@fhv.at> <00B9F0AF-462B-40CA-A3EF-D059E3CD512D@zimbra.com> <F1F7661A-5491-478B-B611-A25BB12CE61B@fhv.at> <FFDF2E62-8C7C-42C8-9F04-267A3BA4125D@fhv.at>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0 SeaMonkey/2.42a1

BÖSCH Christian wrote:

On 14 Jan 2016, at 08:37 , BÖSCH Christian <boesch@fhv.at
<mailto:boesch@fhv.at>> wrote:


hi,

i have two openldap servers 2.4.43 on freebsd 10.2 with multimaster
replication.
if i add on one node a dynamicobject, the other node dies immediatly.
has anybody an idea?

regards,chris

---

added this:
dn: uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>
sn: VKW Guest
objectClass: organizationalPerson
objectClass: person
objectClass: dynamicObject
objectClass: inetLocalMailRecipient
objectClass: inetOrgPerson
objectClass: top
uid: vkw-guest
cn: VKW Guest


the log says:
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: activity on 1 descriptor
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: activity on:
Jan 13 13:08:40 openldap2 slapd[75017]:  30r
Jan 13 13:08:40 openldap2 slapd[75017]:
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: read activity on 30
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=6
active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=7
active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=8
active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=9
active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: daemon: select: listen=10
active_threads=0 tvp=zero
Jan 13 13:08:40 openldap2 slapd[75017]: connection_get(30)
Jan 13 13:08:40 openldap2 slapd[75017]: connection_get(30): got connid=0
Jan 13 13:08:40 openldap2 slapd[75017]: =>do_syncrepl rid=021
Jan 13 13:08:40 openldap2 slapd[75017]: =>do_syncrep2 rid=021
Jan 13 13:08:40 openldap2 slapd[75017]: do_syncrep2: rid=021
cookie=rid=021,sid=001,csn=20160113120840.025550Z#000000#001#000000
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_message_to_entry: rid=021
DN: uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>, UUID:
2074bc1e-4e3a-1035-92a1-ed72d2e7074a
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPrettyNormal:
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPrettyNormal:
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>,
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=admin,o=xyz.net
<http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=admin,o=xyz.net
<http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize:
<cn=admin,o=xyz.net <http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize:
<cn=admin,o=xyz.net <http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=admin,o=xyz.net
<http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=admin,o=xyz.net
<http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize:
<cn=admin,o=xyz.net <http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize:
<cn=admin,o=xyz.net <http://xyz.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty:
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty:
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize:
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize:
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnPretty: <cn=Subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnPretty: <cn=Subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: >>> dnNormalize: <cn=Subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: <<< dnNormalize: <cn=subschema>
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021
LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD)
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_search
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_dn2entry("o=abc.net
<http://abc.net/>")
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_dn2id("o=abc.net
<http://abc.net/>")
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_dn2id: got id=0x1
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_decode:
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_decode
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: search access
to "o=abc.net <http://abc.net/>" "entry" requested
Jan 13 13:08:40 openldap2 slapd[75017]: <= root access granted
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: search access
granted by manage(=mwrscxd)
Jan 13 13:08:40 openldap2 slapd[75017]: search_candidates: base="o=abc.net
<http://abc.net/>" (0x00000001) scope=2
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_filter_candidates
Jan 13 13:08:40 openldap2 slapd[75017]:EQUALITY
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_equality_candidates (entryUUID)
Jan 13 13:08:40 openldap2 slapd[75017]: => key_read
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_idl_fetch_key: [5ec43656]
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_index_read: failed (-30798)
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_equality_candidates: id=0,
first=0, last=0
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_filter_candidates: id=0
first=0 last=0
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_search_candidates: id=0
first=0 last=0
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_search: no candidates
Jan 13 13:08:40 openldap2 slapd[75017]: send_ldap_result: conn=-1 op=0 p=0
Jan 13 13:08:40 openldap2 slapd[75017]: send_ldap_result: err=0 matched=""
text=""
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021 be_search (0)
Jan 13 13:08:40 openldap2 slapd[75017]: syncrepl_entry: rid=021
uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>
Jan 13 13:08:40 openldap2 slapd[75017]: slap_queue_csn: queueing
0x846348780 20160113120840.025550Z#000000#001#000000
Jan 13 13:08:40 openldap2 slapd[75017]: ==> unique_add
<uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>>
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: manage access
to "uid=vkw-guest,ou=people,o=abc.net <http://abc.net/>" "entry" requested
Jan 13 13:08:40 openldap2 slapd[75017]: <= root access granted
Jan 13 13:08:40 openldap2 slapd[75017]: => access_allowed: manage access
granted by manage(=mwrscxd)
Jan 13 13:08:40 openldap2 slapd[75017]: unique_add: administrative bypass,
skipping
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: ndn:
"ou=people,o=abc.net <http://abc.net/>"
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: oc:
"dynamicObject", at: "(null)"
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_dn2entry("ou=people,o=abc.net
<http://abc.net/>")
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_dn2id("ou=people,o=abc.net
<http://abc.net/>")
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_dn2id: got id=0x3
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_decode:
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_decode
Jan 13 13:08:40 openldap2 slapd[75017]: => mdb_entry_get: found entry:
"ou=people,o=abc.net <http://abc.net/>"
Jan 13 13:08:40 openldap2 slapd[75017]: <= mdb_entry_get: failed to find
objectClass dynamicObject
Jan 13 13:08:40 openldap2 slapd[75017]: mdb_entry_get: rc=16



I suggest reading the above line where it clearly notes it has no knowledge
of the dynamicObject objectClass. Looks like a failure to have consistent
schema between nodes?


ok quanah, as you always mention to read the manuals carefully is quite a good
idea…

        The  quick and dirty solution is to set *schemacheck=off* in the syncrepl
        configuration and, optionally, exclude the operational attributes  from
        replication, using

"Quick and dirty" is still dirty. You have a schema problem with yourou=people,o=abc.net entry. If you don't fix it you will have continual problems.


--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/

References:
- slapd dies
  - From: BÖSCH Christian <boesch@fhv.at>
- Re: slapd dies
  - From: Quanah Gibson-Mount <quanah@zimbra.com>
- Re: slapd dies
  - From: BÖSCH Christian <boesch@fhv.at>
- Re: slapd dies
  - From: BÖSCH Christian <boesch@fhv.at>

Prev by Date: Re: slapd dies
Next by Date: Re: LMBD questions (stat & copy)
Index(es):
- Chronological
- Thread