[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
consumer state is newer than provider (was "can I replicate several branches to the same slave from one master?")
- To: "Quanah Gibson-Mount" <quanah@symas.com>
- Subject: consumer state is newer than provider (was "can I replicate several branches to the same slave from one master?")
- From: "Zeus Panchenko" <zeus@ibs.dn.ua>
- Date: Thu, 27 Jul 2017 13:11:32 +0300
- Cc: Andrew Findlay <andrew.findlay@skills-1st.co.uk>, openldap-technical@openldap.org
- Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWxsbGdnZ3U1NQTExN cXFzx8fG/v7+f8hyWAAACXUlEQVQ4jUWSwXYiIRBFi4yyhtjtWpmRdTL0ZC3TJOukDa6Rc+T/P2F eFepwtFvr8upVFVDua8mLWw6La4VIKTuMdAPOebdU55sQs3n/D1xFFPFGVGh4AHKttr5K0bS6g7N ZCge7qpVLB+f1Z2WAj2OKXwIWt/bXpdXSiu8KXbviWkHxF5td9+lg2e3xlI2SCvatK8YLfHyh9lw 15yrad8Va5eXg4Llr7QmAaC+dL9sDt9iad/DX3OKvLMBf+dm0A0QuMrTvYIevSik1IaSVvgjIHt5 lSCG2ynNRpEcBZ8cgDWk+Ns99qzsYYV3MZoppWzGtYlTO9+meG6m/g92iNO9LfQB2JZsMpoJs7QG ku2KtabRK0bZRwDLyBDvwlxTm6ZlP7qyOqLcfqtLexpDSB4M0H3I/PQy1emvjjzgK+A0LmMKl6Lq zlqzh0VGAw440F6MJd8cY0nI7wiF/fVIBGY7UNCAXy6DmfYGCLLI0wtDbVcDUMqtJLmAhLqODQAe riERAxXJ1/QYGpa0ymqyytpKC19MNXHjvFmEsfcHIrncFR4xdbYWgmfEGLCcZokpGbGj1egMR+6M 1BkNX1pDdhPcOXpAnAeLQUwQLYepgQoZVNGS61yaE8CYA7gYAcWKzwGstACY2HTFvvOwk4FXAG/a mKHni/EcA/GkOk7I0IK7UMIf3+SahU8/FJdiE7KcuWdM3MFocUDEEIX9LfJoo4xV5tnNKc3jJuSs SZWgnnhepgU1zN4Hii18yW4RwDX52CXUtk0Hqz6cHOIUkWaX8fDcB+J7y1y2xDHwjv/8Buu8Ekz6 7tXQAAAAASUVORK5CYII=
- In-reply-to: Your message of Fri, 30 Jun 2017 07:03:06 -0700 <8EAD01DCA3FEF6F4A3954003@[192.168.1.30]>
- Organization: I.B.S. LLC
- References: <20170627010438.33399@relay.ibs.dn.ua> <20170629144707.GA2797@slab.skills-1st.co.uk> <20170629234849.5234@relay.ibs.dn.ua> <WM!432f030c056684ee9477e7fdbd9b8d2d847562ca41a21abaf05a6209998ce966d91c6d2f67d0003944418a170bb4a48e!@mailstronghold-3.zmailcloud.com> <C4E19831DC3FE45AA2832CB7@[192.168.1.30]> <20170630073207.44733@relay.ibs.dn.ua> <WM!5ab3133c18aa8d69ad165fcf0978d137d738ed2d79c11988ed3050feaa64c4f65fd982289d8044b55c255b18cb5d8c2e!@mailstronghold-2.zmailcloud.com> <8EAD01DCA3FEF6F4A3954003@[192.168.1.30]>
greetings,
alas, but I still face the issue ... :-\
---[ replica log quotation start ]-------------------------------------------
...
Jul 27 12:29:46 ABC slapd[15466]: do_syncrep2: rid=000 LDAP_RES_SEARCH_RESULT (53) Server is unwilling to perform
Jul 27 12:29:46 ABC slapd[15466]: do_syncrep2: rid=000 (53) Server is unwilling to perform
Jul 27 12:29:46 ABC slapd[15466]: do_syncrepl: rid=000 rc -2 retrying
...
---[ replica log quotation end ]-------------------------------------------
---[ master log quotation start ]-------------------------------------------
...
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=1 BIND dn="uid=replABC,ou=repl,ou=system,dc=example" method=128
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=1 BIND dn="uid=replABC,ou=repl,ou=system,dc=example" mech=SIMPLE ssf=0
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=1 RESULT tag=97 err=0 text=
Jul 27 12:29:46 master slapd[45467]: conn=2611 op=0 EXT oid=1.3.6.1.4.1.1466.20037
Jul 27 12:29:46 master slapd[45467]: conn=2611 op=0 STARTTLS
Jul 27 12:29:46 master slapd[45467]: conn=2611 op=0 RESULT oid= err=0 text=
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=2 SRCH base="cn=example-accesslog" scope=2 deref=0 filter="(&(objectClass=auditWriteObject)(reqResult=0))"
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=2 SRCH attr=reqDN reqType reqMod reqNewRDN reqDeleteOldRDN reqNewSuperior entryCSN
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=2 SEARCH RESULT tag=101 err=53 nentries=0 text=consumer state is newer than provider!
Jul 27 12:29:46 master slapd[45467]: conn=2610 op=3 UNBIND
...
---[ master log quotation end ]-------------------------------------------
please advise
Quanah Gibson-Mount <quanah@symas.com> wrote:
> > slapd[38004]: conn=30116 op=3 SEARCH RESULT tag=101 err=53 nentries=0
> > text=consumer state is newer than provider!
>
> It sounds like your replica was not configured correctly initially and
> self-generated its own CSN that is newer than the one on the provider.
what in replica configuration can lead to that?
I configured replica just as it is described in the documentation
"18.3.2.1. Delta-syncrepl Provider configuration"
> It would be interesting to make a modification on the provider so that
> its CSN is updated (and thus has one newer than on the consumer).
doesn't help ...
helps only deleting consumer DB (in some cases for a several times)
DB replicates but after some time it looses sync again ...
can master configuration cause that as well?
here is (just to remind) how master/replica are configured ...
---[ replica slapd.conf quotation start ]-------------------------------------------
...
syncrepl rid=0
provider=ldap://master.example:389
starttls=critical
searchbase="dc=example"
bindmethod=simple
binddn="uid=replABC,ou=repl,dc=example"
credentials="***"
tls_cacert=/usr/local/etc/openldap/ssl/ca.crt
tls_cert=/usr/local/etc/openldap/ssl/ABC.crt
tls_key=/usr/local/etc/openldap/ssl/ABC.key
tls_reqcert=try
type=refreshAndPersist
retry="60 +"
logbase="cn=example-accesslog"
logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"
syncdata=accesslog
...
---[ replica slapd.conf quotation end ]-------------------------------------------
---[ master configuration quotation start ]-------------------------------------------
...
access to dn.subtree="cn=example-accesslog"
by dn.onelevel="ou=repl,ou=system,dc=example" read
by * break
###--- ABC
access to dn.regex="^uid=(.*)@foo.bar,authorizedService=(mail|xmpp)@foo.bar,uid=(.*),ou=People,dc=example$"
attrs=entry,entryCSN,entryUUID,objectClass,cn,...
by dn.exact="uid=replABC,ou=repl,ou=system,dc=example" read
by * break
access to dn.regex="ou=ABC,ou=Sendmail,dc=example|ou=ABC,ou=DHCP,dc=example"
by dn.exact="uid=replABC,ou=repl,ou=system,dc=example" read
by * stop
...
---[ master configuration quotation end ]-------------------------------------------
--
Zeus V. Panchenko jid:zeus@im.ibs.dn.ua
IT Dpt., I.B.S. LLC GMT+2 (EET)