Re: OpenLDAP syncrepl woes

2011-12-01 Thread Jeffrey Crawford
On Wed, Nov 23, 2011 at 10:51 AM, Jeffrey Crawford jeffr...@ucsc.edu wrote: On Wed, Nov 23, 2011 at 10:13 AM, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Wednesday, November 23, 2011 9:26 AM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: read that already: my original question was

Re: OpenLDAP syncrepl woes

2011-12-01 Thread Quanah Gibson-Mount
--On Thursday, December 01, 2011 9:38 AM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: Humm that didn't seem to work. I'm rebuilding so I'll give that another try. Finally got to do another test. I tested by changing the permissions of the replication account permissions and tried

Re: OpenLDAP syncrepl woes

2011-11-23 Thread Jeffrey Crawford
read that already: my original question was the following: Granted the above issues might be explained away in that we don't yet have enough ram on the machines yet, however it does seem to present us with a problem when we notice the discrepancy, how do we during run time re-sync the data from

Re: OpenLDAP syncrepl woes

2011-11-23 Thread Quanah Gibson-Mount
--On Wednesday, November 23, 2011 9:26 AM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: read that already: my original question was the following: Granted the above issues might be explained away in that we don't yet have enough ram on the machines yet, however it does seem to present us

Re: OpenLDAP syncrepl woes

2011-11-23 Thread Jeffrey Crawford
On Wed, Nov 23, 2011 at 10:13 AM, Quanah Gibson-Mount qua...@zimbra.com wrote: --On Wednesday, November 23, 2011 9:26 AM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: read that already: my original question was the following: Granted the above issues might be explained away in that we

Re: OpenLDAP syncrepl woes

2011-11-22 Thread Jeffrey Crawford
On Thu, Nov 17, 2011 at 11:47 PM, Howard Chu h...@symas.com wrote: Jeffrey Crawford wrote: On Thu, Nov 17, 2011 at 9:21 PM, Howard Chuh...@symas.com  wrote: Jeffrey Crawford wrote: On Thu, Nov 17, 2011 at 5:50 PM, Howard Chuh...@symas.com    wrote: There ought to be other error messages

Re: OpenLDAP syncrepl woes

2011-11-22 Thread Quanah Gibson-Mount
--On Tuesday, November 22, 2011 5:50 PM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: Starting slapd with the -c option isn't working or I'm using the wrong combination. man slapadd. --Quanah -- Quanah Gibson-Mount Sr. Member of Technical Staff Zimbra, Inc A Division of VMware, Inc.

Re: OpenLDAP syncrepl woes

2011-11-21 Thread Quanah Gibson-Mount
--On Wednesday, November 16, 2011 3:49 PM -0800 Jeffrey Crawford jeffr...@ucsc.edu wrote: Oh and we are using bdb 4.6 right now (forgot to answer that) With all the patches? Oracle lists 4. 4.6.21 Requires log file format upgrade. change log - patches ( 4) -- Quanah Gibson-Mount

Re: OpenLDAP syncrepl woes

2011-11-21 Thread Jeffrey Crawford
Okay using bdb 4.8 seems to be working better, I ran through several mass adds and deletes. I stil get periodic failures of: Nov 21 10:32:27 idm-prod-ldap-2 slapd[41275]: conn=-1 op=0: attribute reqEnd index delete failure which is obviously part of the acceslog overlay. I am replicating that DB

Re: OpenLDAP syncrepl woes

2011-11-17 Thread Howard Chu
Jeffrey Crawford wrote: On Wed, Nov 16, 2011 at 1:27 PM, Howard Chu h...@symas.com mailto:h...@symas.com wrote: Jeffrey Crawford wrote: On Wed, Nov 16, 2011 at 7:40 AM, Jeffrey Crawfordjeffr...@ucsc.edu mailto:jeffr...@ucsc.edu wrote: On Wed, Nov 16, 2011 at

Re: OpenLDAP syncrepl woes

2011-11-17 Thread Jeffrey Crawford
On Thu, Nov 17, 2011 at 5:50 PM, Howard Chu h...@symas.com wrote: Jeffrey Crawford wrote: On Wed, Nov 16, 2011 at 1:27 PM, Howard Chu h...@symas.com mailto:h...@symas.com wrote:    Jeffrey Crawford wrote:        On Wed, Nov 16, 2011 at 7:40 AM, Jeffrey Crawfordjeffr...@ucsc.edu        

Re: OpenLDAP syncrepl woes

2011-11-17 Thread Howard Chu
Jeffrey Crawford wrote: On Thu, Nov 17, 2011 at 5:50 PM, Howard Chuh...@symas.com wrote: There ought to be other error messages in your log, immediately preceding the one you quoted. Post those too. There really isn't much there but here is an example really not much around it: (I've

Re: OpenLDAP syncrepl woes

2011-11-16 Thread Howard Chu
Jeffrey Crawford wrote: I'm trying to stabilize our openldap server farm before going live and am finding that despite the contextCSN matching between providers and replicas, the actual content of the server is getting out of sync. This is most prominent when we are testing our population

Re: OpenLDAP syncrepl woes

2011-11-16 Thread Jeffrey Crawford
On Wed, Nov 16, 2011 at 12:09 AM, Howard Chu h...@symas.com wrote: Jeffrey Crawford wrote: I'm trying to stabilize our openldap server farm before going live and am finding that despite the contextCSN matching between providers and replicas, the actual content of the server is getting out of

Re: OpenLDAP syncrepl woes

2011-11-16 Thread Jeffrey Crawford
On Wed, Nov 16, 2011 at 7:40 AM, Jeffrey Crawford jeffr...@ucsc.edu wrote: On Wed, Nov 16, 2011 at 12:09 AM, Howard Chu h...@symas.com wrote: Jeffrey Crawford wrote: I'm trying to stabilize our openldap server farm before going live and am finding that despite the contextCSN matching between

Re: OpenLDAP syncrepl woes

2011-11-16 Thread Howard Chu
Jeffrey Crawford wrote: On Wed, Nov 16, 2011 at 12:09 AM, Howard Chuh...@symas.com wrote: There are known bugs in syncrepl delete handling. ITS#7052 is probably relevant here. The fix will be in 2.4.27. Any idea when it will be released? The release branch has been ready to go for a few

Re: OpenLDAP syncrepl woes

2011-11-16 Thread Jeffrey Crawford
On Wed, Nov 16, 2011 at 1:27 PM, Howard Chu h...@symas.com wrote: Jeffrey Crawford wrote: On Wed, Nov 16, 2011 at 7:40 AM, Jeffrey Crawfordjeffr...@ucsc.edu  wrote: On Wed, Nov 16, 2011 at 12:09 AM, Howard Chuh...@symas.com  wrote: Jeffrey Crawford wrote: I'm trying to stabilize our

OpenLDAP syncrepl woes

2011-11-15 Thread Jeffrey Crawford
I'm trying to stabilize our openldap server farm before going live and am finding that despite the contextCSN matching between providers and replicas, the actual content of the server is getting out of sync. This is most prominent when we are testing our population routine and we need to remove