--On Tuesday, December 20, 2011 8:39 PM +0000 "Torsten Schlabach (Tascel eG)" <tschlabach@tascel.net> wrote:We're using OpenLDAP 2.4.23 on Debian Linux. The backend is a back-hdb.Upgrade.
A more complete answer (other than you really do need to upgrade, and for sanity, rebuild the OpenLDAP you have against OpenSSL), is that you have syncprov checkpointing on. So the CSN is only updated in the underlying DB based off the period of time you specified to the overlay. Thus when slapd is running, ldapsearch is always going to give you the correct answer. slapcat may or may not. If you stop slapd, slapcat will.
From the manual page:
syncprov-checkpoint <ops> <minutes>After a write operation has succeeded, write the contextCSN to the underlying database if <ops> write operations or more than <minutes> time have passed since the last checkpoint. Checkpointing is disabled by default.
--Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc. -------------------- Zimbra :: the leader in open source messaging and collaboration