Re: ldapdelete recursive (-r) with syncrepl

To: Quanah Gibson-Mount <quanah@zimbra.com>

Subject: Re: ldapdelete recursive (-r) with syncrepl

From: Frank Crow <fjcrow2008@gmail.com>

Date: Wed, 13 Apr 2016 12:30:45 -0400

Cc: Michael Ströder <michael@stroeder.com>, "openldap-techn." <openldap-technical@openldap.org>

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc; bh=1+1uoFhfkfhl6EoSlD1DpdERbdehTbCskSFm0rcvw3o=; b=tddqtbWwhOmD1ichLSK3YxGEinY0BEW5BkfHwN9a2k9hQy5xA5HFY44a+o84h/5VDh hLqJzmLcJ5OMYTrX3SDrmedD1hyouHhWCkfj9/2Xt49IRVbT4ygEPOO1odr1ckqjcWZQ 0TPvNTnq2WJKB9pa2XqKOgCY/ZcvcyPI/DZy5Ki7IYFKD/Z7nRx6m1ZVcF63Wc7QBgYq dg2GgSDBB6pNXypMMh7EljvJNfYdxTtfZbM3VZfNgPk89wrATBilCGP10i5eLPJkdg+J 2QRgn59ClReI74h9KIA6h89My1Qy71xap+cuR00owU6v2oINYTmFgZva6zCFes+KlmFe Y5sQ==

In-reply-to: <9BF1BC9427FE8EE7B51D16EF@192.168.1.19>

References: <CAB+L7Kenae8mVbFqZDWY+4XU-zYuVyS10tkYpyA9OzzmnwT4qA@mail.gmail.com> <570D6CE5.4090202@stroeder.com> <CAB+L7KdaPyze8rmnQvDegKxAJBc2ZaOhhaPReNk4c-wXd2sPKA@mail.gmail.com> <570DE3E4.1070906@stroeder.com> <CAB+L7KciDqibodaacPNi28o6V3Lv-Z2zx=qUgSppo1Shoxvx-A@mail.gmail.com> <802FD1B93AD8FE416B254437@192.168.1.19> <CAB+L7Ken0rE1H0=1yp2FamLoFf6K6+ouN97ji1rbBrK9rGjoow@mail.gmail.com> <0528F6FD961157D41898C008@192.168.1.19> <CAB+L7KeT9gkdauR8KbnZ8wQv15t6Bq4tNgfQkqzEikCD+Bn=RQ@mail.gmail.com> <79A2E4D0CF7DAC7EFBADC0A9@192.168.1.19> <9BF1BC9427FE8EE7B51D16EF@192.168.1.19>

OK, thanks for the clarification and correction. Doing so makes the restore process slightly more of pain but, on the bright side, I won't need to worry about SIDs. So that nice.

Also on the bright side, working through this I managed to move to delta-syncrepl which appears to be a better solution.

And yeah, I will move to mdb if I can get these guys to bite on upgrading.

Thanks for all the info and advice,

Frank

On Wed, Apr 13, 2016 at 12:29 PM, Quanah Gibson-Mount <quanah@zimbra.com> wrote:

--On Wednesday, April 13, 2016 10:20 AM -0700 Quanah Gibson-Mount <quanah@zimbra.com> wrote:

--On Wednesday, April 13, 2016 1:16 PM -0400 Frank Crow
<fjcrow2008@gmail.com> wrote:

Then just slapcat the data first, do your destructive tests, and then
restore from slapadd. Doing repetitive ldap deletes/adds will just
causes massive database growth.

OK, but I just want to be clear - I'm still not. Does that mean that
I need to nuke /var/lib/ldap on every master replica prior to restoring
the DIT?

Yes.

Or I should say, depends on what you've done. If all masters are in a "bad" state (which would be likely given your test scenario), then yes, you want to reload them all from the same slapcat dump that was taken, so their DBs are identical after restore.

--Quanah

--

Quanah Gibson-Mount
Platform Architect
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
A division of Synacor, Inc

Frank