[Fedora-directory-users] Re: Referential Integrity

Tue Feb 3 18:20:30 UTC 2009

Hi, Tim.  I didn't have time to peruse this (still under a nasty
deadline) but I was looking for one thing I didn't see in your post.
I'm pulling this from memory so please double check it but did you
enable the presence attribute (?) for indexing on all the items listed i
the referential integrity plugin?

By the way, if I might mention it, would you kindly post to the bottom
of future threads.  Top posting makes it very difficult for newcomers to
the list to follow.  Thanks - John

On Tue, 2009-02-03 at 12:24 -0500, Tim Hartmann wrote:
> Well then! Let me give you my experiences so far....
> 
> So I attempted to add "memberuid" to the plugin on the master I wanted
> to use it on... and that went fine. restarted the server,  I added index
> on all my servers for the memberuid attribute, ( I thought I might be
> able to get away with indexing on just the master that was going to run
> the Referential Integrity plugin, but I figured I'd keep my
> configuration as consistent as possible accross both master +
> replicas).   I then enabled the plug in on the console, and then ran
> "/etc/init.d/dirsrv restart" So far, i felt like I was pretty much just
> follow word for work the instructions in the manual. 
> 
> For my testing, I have:
> 
> 3 Directories
> 
> dc=dept,dc=school,dc=edu
> dc=sub,dc=school,dc=edu
> cn=Databaseinfo,dc=school,dc=edu
> 
> All three server diffrent clients, though some user name overlap, and a
> change in one, shouldn't necessarily be reflected in it's neighbor.
> 
> For testing I have a user I want to delete in dept
> 
> uid=User,ou=People,dc=dept,dc=school,dc=edu
> and he's a member of a Posix style group in depts as (under the base
> ou=Group,dc=dept,dc=school,dc=edu_ and the same username (User) is a
> member of a similar group under ou=Group,dc=school,dc=edu, I added him
> there to see if the plug in would traverse directories or not.
> 
> The things I noticed after I restarted and delete the user were this:
> 
> First, once I deleted the user, my redhat-idm-console interface went a
> little wonky, only rendering part of the screen until I  did a "refresh
> all " from  the view menu ,  It also spit out to STDOUT the following
> java errors, which it's never done before:
> 
> 
> Exception in thread "AWT-EventQueue-0" java.lang.NullPointerException
>     at
> javax.swing.plaf.basic.BasicTreeUI.ensureRowsAreVisible(BasicTreeUI.java:1904)
>     at
> javax.swing.plaf.basic.BasicTreeUI.toggleExpandState(BasicTreeUI.java:2223)
>     at
> javax.swing.plaf.basic.BasicTreeUI.handleExpandControlClick(BasicTreeUI.java:2206)
>     at
> javax.swing.plaf.basic.BasicTreeUI.checkForClickInExpandControl(BasicTreeUI.java:2160)
>     at
> javax.swing.plaf.basic.BasicTreeUI$Handler.handleSelectionImpl(BasicTreeUI.java:3498)
>     at
> javax.swing.plaf.basic.BasicTreeUI$Handler.handleSelection(BasicTreeUI.java:3483)
>     at
> javax.swing.plaf.basic.BasicTreeUI$Handler.mousePressed(BasicTreeUI.java:3464)
>     at
> java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:254)
>     at
> java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:253)
>     at java.awt.Component.processMouseEvent(Component.java:5544)
>     at javax.swing.JComponent.processMouseEvent(JComponent.java:3148)
>     at java.awt.Component.processEvent(Component.java:5312)
>     at java.awt.Container.processEvent(Container.java:2001)
>     at java.awt.Component.dispatchEventImpl(Component.java:4014)
>     at java.awt.Container.dispatchEventImpl(Container.java:2059)
>     at java.awt.Component.dispatchEvent(Component.java:3847)
>     at
> java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4249)
>     at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3926)
>     at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3859)
>     at java.awt.Container.dispatchEventImpl(Container.java:2045)
>     at java.awt.Window.dispatchEventImpl(Window.java:1812)
>     at java.awt.Component.dispatchEvent(Component.java:3847)
>     at java.awt.EventQueue.dispatchEvent(EventQueue.java:545)
>     at
> java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:268)
>     at
> java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:197)
>     at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:191)
>     at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:183)
>     at java.awt.EventDispatchThread.run(EventDispatchThread.java:144)
> 
> 
> Next, I noticed that /var/log/dirsrv/slapd-instance/referint
> 
> Log file did not get created, so I created an empty file, restarted the
> directory,  deleted all the data out of "dept" re added it all with an
> ldapmodify from a backup ldif i have for testing, and then once again
> tried to delete "user"
> 
> "User" deleted ok, I saw the same behavior from the GUI interface, and
> when I checked the groups that contained user, he hadn't been removed.
> Nor had any content been added to the
> /var/log/dirsrv/slapd-us72/referint file.
> 
> So at the moment, it looks like Referential Integrity isn't working at
> all for me....  and i'm a little worried about the Java error, and more
> sluggish behavior that my GUI Console is exiting..
> 
> Additionally, I didn't see anything in access or error logs, that might
> indicate whats going on..
> 
> Any thoughts?
> 
> Tim
> 
> 
> 
> 
> 
> 
> John A. Sullivan III wrote:
> > Sorry I can't be more help but I am listening! We use referential
> > integrity but have not yet implemented it in multi-master mode nor have
> > we really stressed and tested it - John
> >
> >   
> >
> 
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
jsullivan at opensourcedevel.com

http://www.spiritualoutreach.com
Making Christianity intelligible to secular society