[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Re: replicating memberOf attribute
- To: openldap-technical@openldap.org
- Subject: Re: replicating memberOf attribute
- From: Chris <chris@gatopelao.org>
- Date: Wed, 27 Jun 2018 21:48:10 +0200
- Autocrypt: addr=chris@gatopelao.org; prefer-encrypt=mutual; keydata= xsFNBFWepCsBEACrXFahP3ACuJ7SzqBqI06YuWS/WiFKRR3wKW7WSK97vmFWx6p1HRaJAWs8 BJmZfJHyr4ycECiA4FTuyztOrhfSuCFbIcxMyKRU82C0n17hUaZmNb1Dm7WDWDJEt4b+69A/ GlWlS971DSlOmH+3dW/xmgNbCkIBcOEiX01+EXVLIQuHIts3AfxYduY3aDt5JPg7ujm0Xm9m umlDRUzNTFkRUlTI1FKw8MSTgYqywPKACBh3SLeHKpr5yF0ndxa/sUQlN95vgUjPMeoQbDit hTIzhelj//NlB5/aqT9fqYVPcazWvlGKK3y83Ffo6hY3CgvHKFMZo2rMOCnJREAEJphllYLQ X5gKBOC35wVYkUdYZkFNGjmGjjHspWPJB0VFSXs/qbfWjt405+ZOnjeOnaU7OobtX0g5pSYJ hPTZaVv4CT/hSSSOBnhM7fapNB2MyfDEjUbsLFh4Gx4OJxRGIjpXXaZmo20YcgdBYAc5Hp3A bFqGBj3LsYbE3sFHn5UPM936d2Zk4mZ72dI2/ZcMd60eWYdAFzx/UPL8IFSUVGZR4c64HprZ VMZwrb5lNYIYXxpMe7cOPInq+x0SpxrpnE2++tQ6VXmzlUT3zvm97WZdYx1i8hgRyECVxW4a FNCifva73mfBhas4fsgMCHz0FRWe6ZI23B6YlT0mnqU68k624wARAQABzRtDaHJpcyA8Y2hy aXNAZ2F0b3BlbGFvLm9yZz7CwX8EEwECACkFAlWepCsCGyMFCQlmAYAHCwkIBwMCAQYVCAIJ CgsEFgIDAQIeAQIXgAAKCRAteaaWv+Tf/bxBEACV8q2HH0FdDesmPx8gwaMu4N4dEBbay24X Z+YYQlyOwE5t2cZORBENb2LWzvfA26YU1DhOgHcFFIduFuYar75nm9WSGEouA/B2RBbB2F62 Lyjdjv9OOayEDRLiJWZ01PeGSnX4ofS5AC+0ifupPUxLsqgLzai7jjkvpBwrNdU5tYL4jze8 v1KPtpoijhkXV7nbmjiPai0anldWCBd//vSe9hWq/BdEnB+eV6RDJ/rLNzSRNHFxIHXDv+U/ kNX40OOR0oZD6QMaBoGwb3mQz/Ua8gEhOlBY7UWQiJiPaSl+af4YGPS4WLi5WeKq/ad35ZTw zhxMPFGye9zwdvIdjZDZaOyKntfkZt0Bp52fiRUguaekIjqNL3F28SpIy+LoxahZBvKI8j5E M235Djm2AJ0/LHbWBHuf3HmFmUEzAetpD76ARVl4+SiaNQTBD5DxQ5rGJDHORwitAg9QJfBM vgT3v0tYGv8hsZhOoYMzxaxDB4KHGBI717NIkFsHQqUVK+0iML2CymrNbnyJjuiRn0DZpSXk +VWroHft1iMZptVFcJ9FaM3F7siQVxth22lhu9dZLONLD8Tqrn/QK1r7BB/mGsLYb534/BXv 81bR6AMYCOMTw7UEiWHUtnDejroeFSijVb5owg9G2WnrrmiqNLkMGtH3fVX1RaQ2MKikrTmG L87BTQRVnqQrARAAx1UVo1YRe/T6BU9FdWdbDiWfzMRwSjJWOreOViKiV+QKbX1P5iR8OAGZ xEBep1WaiePnWTcJbrFoBDs9bP+gDsjRNcLth6v13VtKE3Tyem//4oLzTKtqoQLwd3LgTDDJ V7E0CF6qRJ8v7wn4H5tJxAm4vtKYZ9kfVpTdFQqJxycUa8MazMPqJd7vLs3q/ck5qozYo5Mm nG8X76F7RcsUHLjQwXKzRL225gu8IBQmCF+gmXB84bG0260vaU6F5PAiKiyz+dD18jbQRyCN BHFETw16jIaP4kLgtRcdAjm9QfogaKf1BxljcRLs4G9XDNk0sif5cLim4eiFmVxBOPC8Wi0g uoInVY+dL0VPRhqcOmHLMe7yokPJy3D7vqGnrEa1vT/raQKB6ROvi2qYQR5gOVv7j8Evenln F8askl3R8/eRAv4eHFENE32eWLMqAuqLcPnKYHbnKsZM+NSzA8c2SY37Koe+9C8vNA+NfumD IImiP1qdfII6k5YcQbjDL9aZ5Xf3ePVPtPUr+FNFY+swtw2VuYH4dv7Bs+KjsEk5Azl7N5Ah OzncW8+v0Q5F/iZGeLd0raxQZGK/pCa9IZBbJIKPDnln00UVgLW5HJAwDwJ+OYmKhLmGxQAv +Te+4Z9LPbKhBq7RqEfVS1KYHfEkS1pOotDfeoFBA6bynznYI+8AEQEAAcLBZQQYAQIADwUC VZ6kKwIbDAUJCWYBgAAKCRAteaaWv+Tf/XEvD/96AqgD3lrVBhdotoAy2Oqrc8LrtM2JJt6c lGTpfCsaNNIuva2lGFTOGoyzjrvJ1gBYNvCmd8iILG3YO5vuM5ftzORVNLtpdMOwXfh17DGQ MlJUDgYnW0Y/3z2RzM5kZhkWVGx6rKiDt9APVg3HRPOq5EqbM79NR36XxGlm451qoXc37xse KQjO+RFsllHvEcJ8IJf20pi56hxIi8DNChIE3sUgvUuMtoNu8wc90vvkWN7YzxGh2odc0mq8 XnGsIgfwOsTcePPctCDnxdE+UDCmvhMEY7Kjs8mCE64KM07+Q+eNCBm+mq5HbYITQ8pwg/Td qIEEWJQEUwf92sQ/MJK3B1u8PsOI7upE4Qakada8J5LWqbep0y/zdwsqK9NcOjOs5v+fxYE0 28Kc+zq3qf+LpxqYELoAxFQxDSCxCXRLnsm2qcanpw+BucB+WZYFDoPHPzEknyEG8sWeWC+Z 1J56F3QXWqh+oz+PzC65y0+1Ki6cEKeP/8EiYaZI4xYUg9UXKV/bRq2iEdRNhUrv4kmn1MSV Ws+Lw6BEz3bbV9N8BgUcXwPTgSPlisqGiZr2zDBKFfR45WFLbsmmAmfXGaDg+sIGR0+wOPgR fouZDaJTahsuJtv29Ek7nzUGpn5/o/8IJxbC3Cvy0S2RTfnNn3i8SumvcGMDKD9uQjJQso+j 6g==
- Content-language: en-US
- In-reply-to: <2edd4ff3-4d4a-adc1-b9bf-55d828c38113@worteks.com>
- Openpgp: preference=signencrypt
- References: <5c64206d-47ed-d370-e8c7-43eed4fe4448@gatopelao.org> <2edd4ff3-4d4a-adc1-b9bf-55d828c38113@worteks.com>
- User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.8.0
On 27/06/18 17:09, Clément OUDOT wrote:
>
> Le 26/06/2018 à 12:13, Chris a écrit :
>> Hi,
>>
>> We are using a provider and three consumers that are not syncing the
>> memberOf attributes of inetOrgPerson entries.
>>
>> memberof and refint modules are loaded on the provider and
>> inetOrgPersons' memberOf attributes are correctly updated on the provider.
>>
>> How can I troubleshoot this?
> Reading slapo-memberof manpage:
>
> The memberof overlay may be used with any backend that provides
> full read-write functionality, but it is mainly intended for use with
> local storage back‐
> ends. The maintenance operations it performs are internal to the
> server on which the overlay is configured and are never replicated.
> Replica servers should
> be configured with their own instances of the memberOf overlay if
> it is desired to maintain these memberOf attributes on the replicas.
> Note that slapo-
> memberOf is not compatible with syncrepl based replication, and
> should not be used in a replicated environment. An alternative is to use
> slapo-dynlist to
> emulate slapo-memberOf behavior.
>
>
> But I already used this overlay with syncrepl and it seems to work. You
> indeed need to configure the overlay on the consumers too.
>
>
Thanks Clément,
On closer inspection, one of the three providers is replicating the
memberOf correctly, so that's good news. Now we'll compare the
configurations and narrow it down.
Thanks for the pasted text and the hints. A big help for us. I'll get
back when we find out what the story is.
Cheers.
Chris.