<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html; charset=ISO-8859-1" http-equiv="Content-Type"> </head> <body bgcolor="#ffffff" text="#000000"> On 02/10/2012 01:00 PM, Ian Levesque wrote: <blockquote cite="mid:53332B17-8BEB-49B4-A248-6D95D22B1C93@crystal.harvard.edu" type="cite"> <pre wrap=""> On Feb 10, 2012, at 1:36 PM, Rich Megginson wrote: </pre> <blockquote type="cite"> <blockquote type="cite"> <blockquote type="cite"> <blockquote type="cite"> <pre wrap="">This may be related to <a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/ticket/273">https://fedorahosted.org/389/ticket/273</a> and <a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/ticket/274">https://fedorahosted.org/389/ticket/274</a> which have been fixed in 1.2.10 </pre> </blockquote> <pre wrap="">In this case Ian please open a bugzilla, it looks like we need to address this in RHEL6. </pre> </blockquote> <pre wrap=""> I'll confess that I don't fully understand what tombstone is... Regardless, I'm not sure that either of those tickets apply to the issue at hand. As I understand it, Ticket 273 outlines an issue with searching for tombstone entries after successfully setting up a replica (which as far as I'm hearing, we haven't done). And ticket 274 concerns indexing the tombstone entries. I am able to search for tombstone entries (<a class="moz-txt-link-freetext" href="http://pastebin.com/raw.php?i=a4ytYZvt">http://pastebin.com/raw.php?i=a4ytYZvt</a>) and don't see the errors specified in ticket 274. </pre> </blockquote> <pre wrap=""> in 1.2.9.9 the ruv tombstone entry was indexed correctly, so that's why you see it. For ticket 274, you would only see those errors if you actually attempt to reindex the entryrdn index. </pre> <blockquote type="cite"> <pre wrap="">That said, perhaps there's some bug with tombstone re: the automountmap entries in my LDAP instance. Do you think that would be sufficient to cause the replication issues I'm seeing? </pre> </blockquote> <pre wrap=""> It could be. Taken together, both of those tickets resolve problems with tombstone indexes. At any rate, I would like to know if you can reproduce your issues with 1.2.10.rc1 To confirm, the first step would be to examine your entryrdn index to see what the problematic entries look like e.g. dbscan -f /var/lib/dirsrv/slapd-DOMAIN/db/userRoot/entryrdn.db4 | grep -C 2 automountmapname=auto.direct </pre> </blockquote> <pre wrap=""> Here's the output from the primary: 139:cn=global_policy ID: 139; RDN: "cn=global_policy"; NRDN: "cn=global_policy" 13:nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct ID: 13; RDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct" <a class="moz-txt-link-abbreviated" href="mailto:141:krbprincipalname=ldap/sbgrid-directory.in.hwlab@sbgrid.org">141:krbprincipalname=ldap/sbgrid-directory.in.hwlab@sbgrid.org</a> ID: 141; RDN: <a class="moz-txt-link-rfc2396E" href="mailto:krbprincipalname=ldap/sbgrid-directory.in.hwlab@SBGRID.ORG">"krbprincipalname=ldap/sbgrid-directory.in.hwlab@SBGRID.ORG"</a>; NRDN: <a class="moz-txt-link-rfc2396E" href="mailto:krbprincipalname=ldap/sbgrid-directory.in.hwlab@sbgrid.org">"krbprincipalname=ldap/sbgrid-directory.in.hwlab@sbgrid.org"</a> -- 450:nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master ID: 450; RDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master"; NRDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master" 451:nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct ID: 451; RDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct" 452:nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct ID: 452; RDN: "nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct"; NRDN: "nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct" -- 466:automountmapname=auto.master ID: 466; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master" 467:automountmapname=auto.direct ID: 467; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct" 468:description=/- auto.direct ID: 468; RDN: "description=/- auto.direct"; NRDN: "description=/- auto.direct" -- ID: 12; RDN: "nsuniqueid=3c37a106-eadf11e0-b9798103-f403dc04,automountmapname=auto.master"; NRDN: "nsuniqueid=3c37a106-eadf11e0-b9798103-f403dc04,automountmapname=auto.master" C11:cn=default ID: 13; RDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct" C11:cn=default ID: 261; RDN: "nsuniqueid=ee37db01-ee0511e0-b8f78103-f403dc04,automountMapName=auto_master"; NRDN: "nsuniqueid=ee37db01-ee0511e0-b8f78103-f403dc04,automountmapname=auto_master" -- ID: 450; RDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master"; NRDN: "nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master" C449:cn=test ID: 451; RDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct"; NRDN: "nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct" C449:cn=test ID: 456; RDN: "nsuniqueid=7bdfdb01-371311e1-80c28103-f403dc04,automountmapname=auto_nfs"; NRDN: "nsuniqueid=7bdfdb01-371311e1-80c28103-f403dc04,automountmapname=auto_nfs" -- ID: 464; RDN: "nsuniqueid=bdbd5105-371411e1-80c28103-f403dc04,description=home"; NRDN: "nsuniqueid=bdbd5105-371411e1-80c28103-f403dc04,description=home" C465:cn=default ID: 467; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct" C465:cn=default ID: 466; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master" -- P139:cn=global_policy ID: 132; RDN: "cn=SBGRID.ORG"; NRDN: "cn=sbgrid.org" P13:nsuniqueid=3c37a107-eadf11e0-b9798103-f403dc04,automountmapname=auto.direct ID: 11; RDN: "cn=default"; NRDN: "cn=default" <a class="moz-txt-link-abbreviated" href="mailto:P141:krbprincipalname=ldap/sbgrid-directory.in.hwlab@sbgrid.org">P141:krbprincipalname=ldap/sbgrid-directory.in.hwlab@sbgrid.org</a> -- P450:nsuniqueid=61a1ff02-370b11e1-80c28103-f403dc04,automountmapname=auto.master ID: 449; RDN: "cn=test"; NRDN: "cn=test" P451:nsuniqueid=61a1ff03-370b11e1-80c28103-f403dc04,automountmapname=auto.direct ID: 449; RDN: "cn=test"; NRDN: "cn=test" P452:nsuniqueid=61a1ff04-370b11e1-80c28103-f403dc04,description=/- auto.direct -- P466:automountmapname=auto.master ID: 465; RDN: "cn=default"; NRDN: "cn=default" P467:automountmapname=auto.direct ID: 465; RDN: "cn=default"; NRDN: "cn=default" P468:description=/- auto.direct The secondary replica doesn't have the same entries: 253:automountmapname=auto.master ID: 253; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master" 254:automountmapname=auto.direct ID: 254; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct" 255:description=/- auto.direct ID: 255; RDN: "description=/- auto.direct"; NRDN: "description=/- auto.direct" -- ID: 25; RDN: "cn=posix-ids"; NRDN: "cn=posix-ids" C252:cn=default ID: 254; RDN: "automountmapname=auto.direct"; NRDN: "automountmapname=auto.direct" C252:cn=default ID: 253; RDN: "automountmapname=auto.master"; NRDN: "automountmapname=auto.master" -- P253:automountmapname=auto.master ID: 252; RDN: "cn=default"; NRDN: "cn=default" P254:automountmapname=auto.direct ID: 252; RDN: "cn=default"; NRDN: "cn=default" P255:description=/- auto.direct </pre> </blockquote> Sorry for not getting back to you sooner. I can't say for sure, but it does look like you are running into some of the tombstone issues we have fixed in 1.2.10.1-1 (now in updates-testing) In addition, if you are getting this: <a href="https://fedorahosted.org/389/ticket/282" title="View ticket">NSMMReplicationPlugin - repl_set_mtn_referrals: could not set referrals for replica - err 20</a> <a class="moz-txt-link-freetext" href="https://fedorahosted.org/389/ticket/282">https://fedorahosted.org/389/ticket/282</a> You may have deleted and re-added replicas - in that case, you may want to follow the cleanruv procedure here - <a class="moz-txt-link-freetext" href="http://directory.fedoraproject.org/wiki/Howto:CLEANRUV">http://directory.fedoraproject.org/wiki/Howto:CLEANRUV</a> </body> </html>