MMR configuration with openldap2-2.3.32-0.27 on SLES10 SP2
 

Hi,

I have installed openldap2-2.3.32-0.27 on 2 machines (SLES 10 SP2). I want to configure MMR for these 2 machines.

I am not able to add any ldif file to any master. My slapd.conf on one machine contains (only uncommented lines):

include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema
include /etc/openldap/schema/rfc2307bis.schema
include /etc/openldap/schema/yast.schema

pidfile /var/run/slapd/slapd.pid
argsfile /var/run/slapd/slapd.args
modulepath /usr/lib/openldap/modules

access to dn.base=""
by * read
access to dn.base="cn=Subschema"
by * read
access to attrs=userPassword,userPKCS12
by self write
by * auth
access to attrs=shadowLastChange
by self write
by * read
access to *
by * read
database config
rootdn cn=config
rootpw secret
database monitor
rootdn cn=monitor
rootpw secret

loglevel 7
database bdb
suffix "dc=ldapmmr,dc=com"
checkpoint 1024 5
cachesize 10000
rootdn "cn=Manager,dc=ldapmmr,dc=com"
rootpw secret
directory /var/lib/ldap

serverid 1 ldap://ldaptest15.ldapmmr.com
serverid 2 ldap://ldaptest14.ldapmmr.com
syncrepl rid=002
provider=ldap://ldaptest14.ldapmmr.com
binddn="cn=Manager,dc=ldapmmr,dc=com"
bindmethod=simple
credentials=secret
searchbase="dc=ldapmmr,dc=com"
type=refreshAndPersist
interval=00:00:00:10
retry="60 +"
sizelimit=unlimited
timeout=1

updateref ldap://ldaptest15.ldapmmr.com
mirrormode true
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 100
index objectClass eq
index entryCSN,entryUUID eq
index cn,mail,surname,givenname eq,subinitial
index uidNumber,gidNumber,memberuid,member,uniqueMember eq
index uid eq,subinitial
limits group="cn=replicator accounts,ou=group,dc=ldapmmr,dc=com"
size=unlimited
time=unlimited
Following 3 lines are different on other master:
syncrepl rid=001
provider=ldap://ldaptest15.ldapmmr.com
updateref ldap://ldaptest14.ldapmmr.com


test2:~ # ldapadd -h ldaptest15 -p 389 -D "cn=Manager,dc=ldapmmr,dc=com" -w secret -x -c -f /ldif/mmr/test.ldif
adding new entry "uid=user20n,ou=people,dc=ldapmmr,dc=com"
ldap_add: Referral (10)
referrals:
ldap://ldaptest15.ldapmmr.com/uid=user20n,ou=people,dc=ldapmmr,dc=com

Test.ldif contains:
dn: uid=user20n,ou=people,dc=ldapmmr,dc=com
userPassword:: VXNFcjE=
uid: user20n
description: Test user
objectClass: inetOrgPerson
sn: Admin
cn: Admin


/var/log/messages from ldaptest15 after trying above command:

Mar 1 10:44:37 ldaptest15 slapd[30485]: >>> slap_listener(ldap:///)
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22)
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22): got connid=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_read(22): checking for input on id=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_bind
Mar 1 10:44:37 ldaptest15 slapd[30485]: >>> dnPrettyNormal: <cn=Manager,dc=ldapmmr,dc=com>
Mar 1 10:44:37 ldaptest15 slapd[30485]: <<< dnPrettyNormal: <cn=Manager,dc=ldapmmr,dc=com>, <cn=manager,dc=ldapmmr,dc=com>
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_bind: version=3 dn="cn=Manager,dc=ldapmmr,dc=com" method=128
Mar 1 10:44:37 ldaptest15 slapd[30485]: ==> bdb_bind: dn: cn=Manager,dc=ldapmmr,dc=com
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_bind: v3 bind: "cn=Manager,dc=ldapmmr,dc=com" to "cn=Manager,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: conn=8 op=0 p=3
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: err=0 matched="" text=""
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_response: msgid=1 tag=97 err=0
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22)
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22): got connid=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_read(22): checking for input on id=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_add
Mar 1 10:44:37 ldaptest15 slapd[30485]: >>> dnPrettyNormal: <uid=user20n,ou=people,dc=ldapmmr,dc=com>
Mar 1 10:44:37 ldaptest15 slapd[30485]: <<< dnPrettyNormal: <uid=user20n,ou=people,dc=ldapmmr,dc=com>, <uid=user20n,ou=people,dc=ldapmmr,dc=com>
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_add: dn (uid=user20n,ou=people,dc=ldapmmr,dc=com)
Mar 1 10:44:37 ldaptest15 slapd[30485]: bdb_dn2entry("uid=user20n,ou=people,dc=ldapmmr,dc=com")
Mar 1 10:44:37 ldaptest15 slapd[30485]: => bdb_dn2id("uid=user20n,ou=people,dc=ldapmmr,dc=com")
Mar 1 10:44:37 ldaptest15 slapd[30485]: <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30989)
Mar 1 10:44:37 ldaptest15 slapd[30485]: bdb_referrals: op=104 target="uid=user20n,ou=people,dc=ldapmmr,dc=com" matched="ou=people,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: conn=8 op=1 p=3
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: err=10 matched="" text=""
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: referral="ldap://ldaptest15.ldapmmr.com/uid=user20n,ou=people,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_response: msgid=2 tag=105 err=10
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_response: ref="ldap://ldaptest15.ldapmmr.com/uid=user20n,ou=people,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22)
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22): got connid=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_read(22): checking for input on id=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_add
Mar 1 10:44:37 ldaptest15 slapd[30485]: >>> dnPrettyNormal: <uid=user15n,ou=people,dc=ldapmmr,dc=com>
Mar 1 10:44:37 ldaptest15 slapd[30485]: <<< dnPrettyNormal: <uid=user15n,ou=people,dc=ldapmmr,dc=com>, <uid=user15n,ou=people,dc=ldapmmr,dc=com>
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_add: dn (uid=user15n,ou=people,dc=ldapmmr,dc=com)
Mar 1 10:44:37 ldaptest15 slapd[30485]: bdb_dn2entry("uid=user15n,ou=people,dc=ldapmmr,dc=com")
Mar 1 10:44:37 ldaptest15 slapd[30485]: => bdb_dn2id("uid=user15n,ou=people,dc=ldapmmr,dc=com")
Mar 1 10:44:37 ldaptest15 slapd[30485]: <= bdb_dn2id: get failed: DB_NOTFOUND: No matching key/data pair found (-30989)
Mar 1 10:44:37 ldaptest15 slapd[30485]: bdb_referrals: op=104 target="uid=user15n,ou=people,dc=ldapmmr,dc=com" matched="ou=people,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: conn=8 op=2 p=3
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: err=10 matched="" text=""
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_result: referral="ldap://ldaptest15.ldapmmr.com/uid=user15n,ou=people,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_response: msgid=3 tag=105 err=10
Mar 1 10:44:37 ldaptest15 slapd[30485]: send_ldap_response: ref="ldap://ldaptest15.ldapmmr.com/uid=user15n,ou=people,dc=ldapmmr,dc=com"
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22)
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_get(22): got connid=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_read(22): checking for input on id=8
Mar 1 10:44:37 ldaptest15 slapd[30485]: ber_get_next on fd 22 failed errno=0 (Success)
Mar 1 10:44:37 ldaptest15 slapd[30485]: do_unbind
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_closing: readying conn=8 sd=22 for close
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_close: deferring conn=8 sd=-1
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_resched: attempting closing conn=8 sd=22
Mar 1 10:44:37 ldaptest15 slapd[30485]: connection_close: conn=8 sd=-1


Any help to fix this issue is appreciated.


Thanks in advance,

Regards,
-Shashank