[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: replication from child to Parent domain

To: Marc Patermann <hans.moser@ofd-z.niedersachsen.de>
Subject: Re: replication from child to Parent domain
From: owen nirvana <freeespeech@gmail.com>
Date: Wed, 18 Aug 2010 14:48:19 +0800
Cc: openldap-technical@openldap.org
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:received:in-reply-to :references:from:date:message-id:subject:to:cc:content-type; bh=lw1NQzzmKqwq6VAQNoyfeyMCXYLVbgj/teBFFwK5pts=; b=f6LS97UNwrJOrMgEnvoze0LjIlvUiKPx9wzp90fvwlDzPJW6nHV+9a1zX36/CSWHsB SC99RRut+Vs8naiQHqQ9PK1ZZccHUU0T4oB3c66Ntk+ATgMrPeLU//JzG/vhaHTluRsa YTPU8gho8wqmvWc6IoDFB68JIUEFO8Qo9U6cw=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=ltjclXAn1LcQeC+QYoYudfqzNZUqVkLrtdmihwPc7LLeTAZ4DZpegyYC6c08ixgV2g C9cwmON0VyDhFQ/6+JXACQ2uPy46aY1dKlJmkiiXjNmvx6E3Ed2uDsi33CxVVGm8Xq1O DPv8nWbSVLKbwt24zHK1OprVCj1Pi6h9df+vM=
In-reply-to: <4C695111.4000108@ofd-z.niedersachsen.de>
References: <4C695111.4000108@ofd-z.niedersachsen.de>

parent is customer
"""
suffix          "dc=SCNCA,dc=ROOTCA"
rootdn        "cn=admin,dc=SCNCA,dc=ROOTCA"
rootpw        secret

checkpoint      512 30

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

ServerID 000

syncrepl rid=001
        provider=ldap://${SON_LDAP_ADDRESS}:${SON_LDAP_PORT}
        type=refreshOnly
# five minutes, you should do syncrepl once a day in practice
        interval=00:01:00:00
        searchbase="${SON_BASE}"
        filter="(objectClass=*)"
        scope=sub
        schemachecking=off
        bindmethod=simple
        binddn="${SON_ADMIN}"
        credentials=${SON_PASSWD}
        retry="5 5 300 +"

mirrormode on

"""

son is provider
"""
suffix          "dc=sonCA,dc=SCNCA,dc=ROOTCA"
rootdn        "cn=admin,dc=sonCA,dc=SCNCA,dc=ROOTCA"
rootpw        secret

checkpoint      512 30

overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100

ServerID 001
"""

and son's log is

"""
<<< dnPrettyNormal: <dc=sonca,dc=scnca,dc=rootca>, <dc=sonca,dc=scnca,dc=rootca>
SRCH "dc=sonca,dc=scnca,dc=rootca" 2 0    0 0 0
ber_scanf fmt (m) ber:
ber_dump: buf=010E1060 ptr=010E109C end=010E1136 len=154
0000: 87 0b 6f 62 6a 65 63 74 43 6c 61 73 73 30 06 04   ..objectClass0..
0010: 01 2a 04 01 2b a0 81 82 30 62 04 18 31 2e 33 2e   .*..+...0b..1.3.
0020: 36 2e 31 2e 34 2e 31 2e 34 32 30 33 2e 31 2e 39   6.1.4.1.4203.1.9
0030: 2e 31 2e 31 04 46 30 44 0a 01 01 04 3c 72 69 64   .1.1.F0D....<rid
0040: 3d 30 30 31 2c 73 69 64 3d 30 30 30 2c 63 73 6e   =001,sid=000,csn
0050: 3d 32 30 31 30 30 38 31 33 30 37 34 38 34 36 2e   =20100813074846.
0060: 34 35 37 32 37 39 5a 23 30 30 30 30 30 30 23 30   457279Z#000000#0
0070: 30 30 23 30 30 30 30 30 30 01 01 ff 30 1c 04 17   00#000000...0...
0080: 32 2e 31 36 2e 38 34 30 2e 31 2e 31 31 33 37 33   2.16.840.1.11373
0090: 30 2e 33 2e 34 2e 32 01 01 ff                     0.3.4.2...
    filter: (objectClass=*)
ber_scanf fmt ({M}}) ber:
ber_dump: buf=010E1060 ptr=010E10A9 end=010E1136 len=141
0000: 00 06 04 01 2a 04 01 2b a0 81 82 30 62 04 18 31   ....*..+...0b..1
0010: 2e 33 2e 36 2e 31 2e 34 2e 31 2e 34 32 30 33 2e   .3.6.1.4.1.4203.
0020: 31 2e 39 2e 31 2e 31 04 46 30 44 0a 01 01 04 3c   1.9.1.1.F0D....<
0030: 72 69 64 3d 30 30 31 2c 73 69 64 3d 30 30 30 2c   rid=001,sid=000,
0040: 63 73 6e 3d 32 30 31 30 30 38 31 33 30 37 34 38   csn=201008130748
0050: 34 36 2e 34 35 37 32 37 39 5a 23 30 30 30 30 30   46.457279Z#00000
0060: 30 23 30 30 30 23 30 30 30 30 30 30 01 01 ff 30   0#000#000000...0
0070: 1c 04 17 32 2e 31 36 2e 38 34 30 2e 31 2e 31 31   ...2.16.840.1.11
0080: 33 37 33 30 2e 33 2e 34 2e 32 01 01 ff            3730.3.4.2...
=> get_ctrls
ber_scanf fmt ({m) ber:
ber_dump: buf=010E1060 ptr=010E10B4 end=010E1136 len=130
0000: 30 62 04 18 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e   0b..1.3.6.1.4.1.
0010: 34 32 30 33 2e 31 2e 39 2e 31 2e 31 04 46 30 44   4203.1.9.1.1.F0D
0020: 0a 01 01 04 3c 72 69 64 3d 30 30 31 2c 73 69 64   ....<rid=001,sid
0030: 3d 30 30 30 2c 63 73 6e 3d 32 30 31 30 30 38 31   =000,csn=2010081
0040: 33 30 37 34 38 34 36 2e 34 35 37 32 37 39 5a 23   3074846.457279Z#
0050: 30 30 30 30 30 30 23 30 30 30 23 30 30 30 30 30   000000#000#00000
0060: 30 01 01 ff 30 1c 04 17 32 2e 31 36 2e 38 34 30   0...0...2.16.840
0070: 2e 31 2e 31 31 33 37 33 30 2e 33 2e 34 2e 32 01   .1.113730.3.4.2.
0080: 01 ff                                              ..
ber_scanf fmt (m) ber:
ber_dump: buf=010E1060 ptr=010E10D0 end=010E1136 len=102
0000: 00 46 30 44 0a 01 01 04 3c 72 69 64 3d 30 30 31   .F0D....<rid=001
0010: 2c 73 69 64 3d 30 30 30 2c 63 73 6e 3d 32 30 31   ,sid=000,csn=201
0020: 30 30 38 31 33 30 37 34 38 34 36 2e 34 35 37 32   00813074846.4572
0030: 37 39 5a 23 30 30 30 30 30 30 23 30 30 30 23 30   79Z#000000#000#0
0040: 30 30 30 30 30 01 01 ff 30 1c 04 17 32 2e 31 36   00000...0...2.16
0050: 2e 38 34 30 2e 31 2e 31 31 33 37 33 30 2e 33 2e   .840.1.113730.3.
0060: 34 2e 32 01 01 ff                                  4.2...
=> get_ctrls: oid="1.3.6.1.4.1.4203.1.9.1.1" (noncritical)
ber_scanf fmt ({i) ber:
ber_dump: buf=010E10D2 ptr=010E10D2 end=010E1118 len=70
0000: 30 44 0a 01 01 04 3c 72 69 64 3d 30 30 31 2c 73   0D....<rid=001,s
0010: 69 64 3d 30 30 30 2c 63 73 6e 3d 32 30 31 30 30   id=000,csn=20100
0020: 38 31 33 30 37 34 38 34 36 2e 34 35 37 32 37 39   813074846.457279
0030: 5a 23 30 30 30 30 30 30 23 30 30 30 23 30 30 30   Z#000000#000#000
0040: 30 30 30 01 01 ff                                  000...
ber_scanf fmt (m) ber:
ber_dump: buf=010E10D2 ptr=010E10D7 end=010E1118 len=65
0000: 04 3c 72 69 64 3d 30 30 31 2c 73 69 64 3d 30 30   .<rid=001,sid=00
0010: 30 2c 63 73 6e 3d 32 30 31 30 30 38 31 33 30 37   0,csn=2010081307
0020: 34 38 34 36 2e 34 35 37 32 37 39 5a 23 30 30 30   4846.457279Z#000
0030: 30 30 30 23 30 30 30 23 30 30 30 30 30 30 01 01   000#000#000000..
0040: ff                                                 .
ber_scanf fmt (b) ber:
ber_dump: buf=010E10D2 ptr=010E1115 end=010E1118 len=3
0000: 00 01 ff                                           ...
ber_scanf fmt (}) ber:
ber_dump: buf=010E10D2 ptr=010E1118 end=010E1118 len=0

ber_scanf fmt ({m) ber:
ber_dump: buf=010E1060 ptr=010E1118 end=010E1136 len=30
0000: 00 1c 04 17 32 2e 31 36 2e 38 34 30 2e 31 2e 31   ....2.16.840.1.1
0010: 31 33 37 33 30 2e 33 2e 34 2e 32 01 01 ff         13730.3.4.2...
ber_scanf fmt (b) ber:
ber_dump: buf=010E1060 ptr=010E1133 end=010E1136 len=3
0000: 00 01 ff                                           ...
=> get_ctrls: oid="2.16.840.1.113730.3.4.2" (critical)
<= get_ctrls: n=2 rc=0 err=""
    attrs: * +
send_ldap_result: conn=1001 op=1 p=3
send_ldap_result: err=0 matched="" text=""
send_ldap_response: msgid=2 tag=101 err=0
ber_flush2: 14 bytes to sd 2984
0000: 30 0c 02 01 02 65 07 0a 01 00 04 00 04 00         0....e........
ldap_write: want=14, written=14
0000: 30 0c 02 01 02 65 07 0a 01 00 04 00 04 00         0....e........
daemon: activity on 5 descriptors
daemon: activity on: 4r
daemon: read activity on 4
daemon: WSselect: listen=2 active_threads=0 tvp=zero
connection_get(4)
daemon: WSselect: listen=3 active_threads=0 tvp=zero
connection_get(4): got connid=1001
connection_read(4): checking for input on id=1001
ber_get_next
ldap_read: want=8, got=7
0000: 30 05 02 01 03 42 00                               0....B.
ber_get_next: tag 0x30 len 5 contents:
ber_dump: buf=013E5460 ptr=013E5460 end=013E5465 len=5
0000: 02 01 03 42 00                                     ...B.
op tag 0x42, time 1282112561
ber_get_next
ldap_read: want=8, got=0

ber_get_next on fd 4 failed errno=0 (unknown WSA error)
connection_read(4): input error=-2 id=1001, closing.
connection_closing: readying conn=1001 sd=4 for close
daemon: activity on 1 descriptor
connection_close: deferring conn=1001 sd=4
daemon: waked
daemon: WSselect: listen=2 active_threads=0 tvp=zero
conn=1001 op=2 do_unbind
daemon: WSselect: listen=3 active_threads=0 tvp=zero
connection_resched: attempting closing conn=1001 sd=4
connection_close: conn=1001 sd=4
daemon: removing 4

"""
gtalk:freeespeech@gmail.com

On Mon, Aug 16, 2010 at 10:54 PM, Marc Patermann <hans.moser@ofd-z.niedersachsen.de> wrote:

Off list:

owen nirvana schrieb am 16.08.2010 16:08 Uhr:
> However, the method of different search for different node is not effective.
>
> In my configuration of parent CA,
> ''"
> syncrepl rid=001
>          ...
>          searchbase = "dc=sonCA,dc=parentCA,dc=rootCA"
>          ...
> """
Did you try my first glue with multiple databases?
> I believe the reason is the two nodes have not the same DIT.
What did you mean by that?
your tree from dc=sonCA,dc=parenCA,dc=rootCA will be replicated beyond
dc=parenCA,dc=rootCA if you configure it in the right way.
> Maybe syncrepl could not support it.
You better try one of the approaches und post the consumer and provider
config and replication logs to the list (and maybe some data)

Marc

Follow-Ups:
- Re: replication from child to Parent domain
  - From: Jonathan Clarke <jonathan@phillipoux.net>

Prev by Date: Re: Openldap2.4.16 performance issue
Next by Date: Re: ldap_add: Invalid syntax (21)
Index(es):
- Chronological
- Thread