[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: upgrade problems, can't query




On 06/07/2005, at 2:34 AM, Quanah Gibson-Mount wrote:



--On Wednesday, July 06, 2005 12:22 AM +1000 Tyler Retzlaff <rtr@softelsystems.com.au> wrote:


After upgrading from openldap-2.0.27 to openldap-2.1.29 I can no longer
query
(even anonymously) against my directory. Basically I get:



Out of curiosity, why did you go from one deprecated release to another? I'll note that 2.2.26 is the current stable release, and 2.3.4 is the current release. This upgrade still leaves you two major releases behind. 2.1.29 wasn't even the last 2.1 release (2.1.30 was).


It's the latest version that is packaged with the OS I'm dealing with. (that being fc2). I don't choose when we bump OS versions. As you might understand when dealing with large numbers of machines it isn't a decision to be made lightly. We also like to avoid maintaining / tracking packages outside of the OS's package system though we will if we must.

The configuration is identical, I haven't changed a thing. The data is
the same, I did
however back it up before upgrading.



There were changes to the basic defaults between 2.0 and 2.1. For example, if your client is making an LDAP v2 bind, you must specifically allow that in the configuration file (allow bind_v2). You may want to turn up the debugging levels and see exactly why you are getting the errors that you are (slapd -d -1 is useful for this).

We were always doing v3 binds so this isn't an issue.

After some experimentation with taking a subset of ldif's out of a slave (which hasn't been upgraded) and basing the new master (which has been upgraded) database on them we've discovered that it's some kind of incompatibility with the data itself. Should the data not have been forward compatible with the newer version of openldap? (newer but still out of date I realize)

The log output for debug level -1 follows, it's the same interaction for the previous logs I provided (that being a getent passwd). I can't say it clearly identifies anything to me that the smaller logs didn't. Perhaps it tells you something it doesn't tell me?

Thanks again.

Jul 6 09:12:09 gremlin slapd[5315]: daemon: activity on 1 descriptors
Jul 6 09:12:09 gremlin slapd[5315]: daemon: new connection on 8
Jul 6 09:12:09 gremlin slapd[5315]: conn=3 fd=8 ACCEPT from IP=10.9.2.50:33072 (IP=0.0.0.0:389)
Jul 6 09:12:09 gremlin slapd[5315]: daemon: added 8r
Jul 6 09:12:09 gremlin slapd[5315]: daemon: activity on:
Jul 6 09:12:09 gremlin slapd[5315]:
Jul 6 09:12:09 gremlin slapd[5315]: daemon: select: listen=6 active_threads=0 tvp=NULL
Jul 6 09:12:09 gremlin slapd[5315]: daemon: select: listen=7 active_threads=0 tvp=NULL
Jul 6 09:12:09 gremlin slapd[5315]: daemon: activity on 1 descriptors
Jul 6 09:12:09 gremlin slapd[5315]: daemon: activity on:
Jul 6 09:12:09 gremlin slapd[5315]: 8r
Jul 6 09:12:09 gremlin slapd[5315]:
Jul 6 09:12:09 gremlin slapd[5315]: daemon: read activity on 8
Jul 6 09:12:09 gremlin slapd[5315]: connection_get(8)
Jul 6 09:12:09 gremlin slapd[5315]: connection_get(8): got connid=3
Jul 6 09:12:09 gremlin slapd[5315]: connection_read(8): checking for input on id=3
Jul 6 09:12:09 gremlin slapd[5315]: ber_get_next on fd 8 failed errno=11 (Resource temporarily unavailable)
Jul 6 09:12:09 gremlin slapd[5315]: do_bind
Jul 6 09:12:09 gremlin slapd[5315]: >>> dnPrettyNormal: <uid=admin,ou=People,o=alienfarm>
Jul 6 09:12:09 gremlin slapd[5315]: <<< dnPrettyNormal: <uid=admin,ou=People,o=alienfarm>, <uid=admin,ou=people,o=alienfarm>
Jul 6 09:12:09 gremlin slapd[5315]: do_bind: version=3 dn="uid=admin,ou=People,o=alienfarm" method=128
Jul 6 09:12:09 gremlin slapd[5315]: conn=3 op=0 BIND dn="uid=admin,ou=People,o=alienfarm" method=128
Jul 6 09:12:09 gremlin slapd[5315]: ==> ldbm_back_bind: dn: uid=admin,ou=People,o=alienfarm
Jul 6 09:12:09 gremlin slapd[5315]: dn2entry_r: dn: "uid=admin,ou=people,o=alienfarm"
Jul 6 09:12:09 gremlin slapd[5315]: daemon: select: listen=6 active_threads=1 tvp=NULL
Jul 6 09:12:09 gremlin slapd[5315]: daemon: select: listen=7 active_threads=1 tvp=NULL
Jul 6 09:12:09 gremlin slapd[5315]: => dn2id ( "uid=admin,ou=people,o=alienfarm" )
Jul 6 09:12:09 gremlin slapd[5315]: => ldbm_cache_open( "dn2id.dbb", 73, 600 )
Jul 6 09:12:09 gremlin slapd[5315]: <= ldbm_cache_open (cache 0)
Jul 6 09:12:09 gremlin slapd[5315]: <= dn2id NOID
Jul 6 09:12:09 gremlin slapd[5315]: dn2entry_r: dn: "ou=people,o=alienfarm"
Jul 6 09:12:09 gremlin slapd[5315]: => dn2id( "ou=people,o=alienfarm" )
Jul 6 09:12:09 gremlin slapd[5315]: => ldbm_cache_open( "dn2id.dbb", 73, 600 )
Jul 6 09:12:09 gremlin slapd[5315]: <= ldbm_cache_open (cache 0)
Jul 6 09:12:09 gremlin slapd[5315]: <= dn2id NOID
Jul 6 09:12:09 gremlin slapd[5315]: dn2entry_r: dn: "o=alienfarm"
Jul 6 09:12:09 gremlin slapd[5315]: => dn2id( "o=alienfarm" )
Jul 6 09:12:09 gremlin slapd[5315]: => ldbm_cache_open( "dn2id.dbb", 73, 600 )
Jul 6 09:12:09 gremlin slapd[5315]: <= ldbm_cache_open (cache 0)
Jul 6 09:12:09 gremlin slapd[5315]: <= dn2id NOID
Jul 6 09:12:09 gremlin slapd[5315]: conn=3 op=0 BIND dn="uid=admin,ou=People,o=alienfarm" mech=SIMPLE ssf=0
Jul 6 09:12:09 gremlin slapd[5315]: do_bind: v3 bind: "uid=admin,ou=People,o=alienfarm" to "uid=admin,ou=People,o=alienfarm"
Jul 6 09:12:09 gremlin slapd[5315]: send_ldap_result: conn=3 op=0 p=3
Jul 6 09:12:09 gremlin slapd[5315]: send_ldap_result: err=0 matched="" text=""
Jul 6 09:12:09 gremlin slapd[5315]: send_ldap_response: msgid=1 tag=97 err=0
Jul 6 09:12:09 gremlin slapd[5315]: conn=3 op=0 RESULT tag=97 err=0 text=
Jul 6 09:12:09 gremlin slapd[5315]: daemon: activity on 1 descriptors
Jul 6 09:12:09 gremlin slapd[5315]: daemon: activity on:
Jul 6 09:12:09 gremlin slapd[5315]: 8r
Jul 6 09:12:09 gremlin slapd[5315]:
Jul 6 09:12:09 gremlin slapd[5315]: daemon: read activity on 8
Jul 6 09:12:09 gremlin slapd[5315]: connection_get(8)
Jul 6 09:12:09 gremlin slapd[5315]: connection_get(8): got connid=3
Jul 6 09:12:09 gremlin slapd[5315]: connection_read(8): checking for input on id=3
Jul 6 09:12:09 gremlin slapd[5315]: ber_get_next on fd 8 failed errno=11 (Resource temporarily unavailable)
Jul 6 09:12:09 gremlin slapd[5315]: do_search
Jul 6 09:12:09 gremlin slapd[5315]: >>> dnPrettyNormal: <o=alienfarm>
Jul 6 09:12:09 gremlin slapd[5315]: <<< dnPrettyNormal: <o=alienfarm>, <o=alienfarm>
Jul 6 09:12:09 gremlin slapd[5315]: SRCH "o=alienfarm" 2 0
Jul 6 09:12:09 gremlin slapd[5315]: 0 0 0
Jul 6 09:12:09 gremlin slapd[5315]: begin get_filter
Jul 6 09:12:09 gremlin slapd[5315]: EQUALITY
Jul 6 09:12:09 gremlin slapd[5315]: end get_filter 0
Jul 6 09:12:09 gremlin slapd[5315]: filter: (objectClass=posixAccount)
Jul 6 09:12:09 gremlin slapd[5315]: attrs:
Jul 6 09:12:09 gremlin slapd[5315]: uid
Jul 6 09:12:09 gremlin slapd[5315]: userPassword
Jul 6 09:12:09 gremlin slapd[5315]: uidNumber
Jul 6 09:12:10 gremlin slapd[5315]: gidNumber
Jul 6 09:12:10 gremlin slapd[5315]: cn
Jul 6 09:12:10 gremlin slapd[5315]: homeDirectory
Jul 6 09:12:10 gremlin slapd[5315]: loginShell
Jul 6 09:12:10 gremlin slapd[5315]: gecos
Jul 6 09:12:10 gremlin slapd[5315]: description
Jul 6 09:12:10 gremlin slapd[5315]: objectClass
Jul 6 09:12:10 gremlin slapd[5315]:
Jul 6 09:12:10 gremlin slapd[5315]: conn=3 op=1 SRCH base="o=alienfarm" scope=2 filter="(objectClass=posixAccount)"
Jul 6 09:12:10 gremlin slapd[5315]: conn=3 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass
Jul 6 09:12:10 gremlin slapd[5315]: => ldbm_back_search
Jul 6 09:12:10 gremlin slapd[5315]: dn2entry_r: dn: "o=alienfarm"
Jul 6 09:12:10 gremlin slapd[5315]: => dn2id( "o=alienfarm" )
Jul 6 09:12:10 gremlin slapd[5315]: => ldbm_cache_open( "dn2id.dbb", 73, 600 )
Jul 6 09:12:10 gremlin slapd[5315]: <= ldbm_cache_open (cache 0)
Jul 6 09:12:10 gremlin slapd[5315]: <= dn2id NOID
Jul 6 09:12:10 gremlin slapd[5315]: send_ldap_result: conn=3 op=1 p=3
Jul 6 09:12:10 gremlin slapd[5315]: send_ldap_result: err=10 matched="" text=""
Jul 6 09:12:10 gremlin slapd[5315]: send_ldap_response: msgid=2 tag=101 err=32
Jul 6 09:12:10 gremlin slapd[5315]: conn=3 op=1 RESULT tag=101 err=32 text=
Jul 6 09:12:09 gremlin slapd[5315]: daemon: select: listen=6 active_threads=1 tvp=NULL
Jul 6 09:12:10 gremlin slapd[5315]: daemon: select: listen=7 active_threads=1 tvp=NULL
Jul 6 09:12:10 gremlin slapd[5315]: daemon: activity on 1 descriptors
Jul 6 09:12:10 gremlin slapd[5315]: daemon: activity on:
Jul 6 09:12:10 gremlin slapd[5315]: 8r
Jul 6 09:12:10 gremlin slapd[5315]:
Jul 6 09:12:10 gremlin slapd[5315]: daemon: read activity on 8
Jul 6 09:12:10 gremlin slapd[5315]: connection_get(8)
Jul 6 09:12:10 gremlin slapd[5315]: connection_get(8): got connid=3
Jul 6 09:12:10 gremlin slapd[5315]: connection_read(8): checking for input on id=3
Jul 6 09:12:10 gremlin slapd[5315]: ber_get_next on fd 8 failed errno=0 (Success)
Jul 6 09:12:10 gremlin slapd[5315]: connection_read(8): input error=-2 id=3, closing.
Jul 6 09:12:10 gremlin slapd[5315]: connection_closing: readying conn=3 sd=8 for close
Jul 6 09:12:10 gremlin slapd[5315]: connection_close: conn=3 sd=8
Jul 6 09:12:10 gremlin slapd[5315]: daemon: removing 8
Jul 6 09:12:10 gremlin slapd[5315]: conn=3 fd=8 closed
Jul 6 09:12:10 gremlin slapd[5315]: daemon: select: listen=6 active_threads=0 tvp=NULL
Jul 6 09:12:10 gremlin slapd[5315]: daemon: select: listen=7 active_threads=0 tvp=NULL
Jul 6 09:12:10 gremlin slapd[5315]: daemon: activity on 1 descriptors
Jul 6 09:12:10 gremlin slapd[5315]: daemon: select: listen=6 active_threads=0 tvp=NULL
Jul 6 09:12:10 gremlin slapd[5315]: daemon: select: listen=7 active_threads=0 tvp=NULL



Regards, Quanah

--
Quanah Gibson-Mount
Principal Software Developer
ITSS/Shared Services
Stanford University
GnuPG Public Key: http://www.stanford.edu/~quanah/pgp.html

"These censorship operations against schools and libraries are stronger
than ever in the present religio-political climate. They often focus on
fantasy and sf books, which foster that deadly enemy to bigotry and blind
faith, the imagination." -- Ursula K. Le Guin