[Pkg-openldap-devel] Bug#536082: Bug#536082: slapd: LDAP setup as Syncrepl refreshandpersist consumer hangs

[Quanah Gibson-Mount]

--On Wednesday, July 08, 2009 4:39 PM -0400 Arnout Boelens 
<aboelens at engin.umass.edu> wrote:

> Thanks for the replies. However, I added "Retry "60 +"" and removed the
> attrs  option, but replication still stops working. Any more ideas about
> what could  cause this?

Given the ancient release you are using, and the numerous syncrepl bugs 
fixed since 2.4.11, there are any number of problems that could be causing 
this.  You may want to read:

<http://www.openldap.org/software/release/changes.html>

This of course doesn't even include the fixes made since 2.4.16, which are 
numerous as well.

It would be helpful, of course, to see some logs, like of the syncrepl 
consumer binding to the master, etc.

As a side note, this acl is silly:

access to
    attrs=loginShell
    by dn.regex="uid=.*/admin,cn=example.com,cn=gssapi,cn=auth" write
    by self write
    by * read
    by dn="uid=host/consumer.example.com,cn=example.com,cn=gssapi,cn=auth" 
read

The last "by" clause will never be used, since the by * read will always 
apply.  You should move the by dn="uid=host/..." up one.

--Quanah

--

Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra ::  the leader in open source messaging and collaboration