LINUX.ORG.RU
ФорумAdmin

ldap replication


0

0

slave сервер при поступлении на него запроса не переправляет его мастеру. Даже не мытается стукнуться на master(tcpdump не показыавет ни одного пакетика в ту сторону).

из master slapd.conf: include /etc/ldap/schema/core.schema include /etc/ldap/schema/cosine.schema include /etc/ldap/schema/nis.schema include /etc/ldap/schema/inetorgperson.schema include /etc/ldap/schema/misc.schema include /etc/ldap/schema/samba.schema

loglevel 256

suffix "dc=example,dc=com"

replica uri=ldap://slave.example:389 bindmethod=simple binddn="cn=replicator,dc=example,dc=com" credentials=hehe1234

replogfile /var/lib/ldap/replog

access to attrs=userPassword,shadowLastChange by dn="cn=admin,dc=example,dc=com" write by dn="cn=replicator,dc=example,dc=com" write by anonymous auth by self write by * none access to dn.base="" by * read access to * by dn="cn=admin,dc=example,dc=com" write by dn="cn=replicator,dc=example,dc=com" write by * read ==========================================

slave slapd.conf отличается лишь этим: updatedn "cn=replicator,dc=example,dc=com" updateref ldap://master.example.com:389

replica и replogfile в нём не указаны.

=========================================

При изменении базы на master-е, репликация на slave проходит удачно. Базы идентичны.

slave:/etc/ldap# ldapadd -x -D cn=root,dc=example,dc=com -w hehe1234 -f /tmp/1.ldif adding new entry "cn=hehe,dc=example,dc=com" ldap_add: Referral (10) referrals: ldap://slave.example.com:389/cn=hehe,dc=example,dc=com

slave syslog:

Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor Feb 11 17:53:09 pinky slapd[9189]: daemon: listen=7, new connection on 11 Feb 11 17:53:09 pinky slapd[9189]: daemon: added 11r (active) listener=(nil) Feb 11 17:53:09 pinky slapd[9189]: conn=1 fd=11 ACCEPT from IP=127.0.0.1:1885 (IP=0.0.0.0:389) Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on: Feb 11 17:53:09 pinky slapd[9189]: 11r Feb 11 17:53:09 pinky slapd[9189]: Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11 Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 BIND dn="cn=root,dc=example,dc=com" method=128 Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 BIND dn="cn=root,dc=example,dc=com" mech=SIMPLE ssf=0 Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 RESULT tag=97 err=0 text= Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on: Feb 11 17:53:09 pinky slapd[9189]: 11r Feb 11 17:53:09 pinky slapd[9189]: Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11 Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=1 ADD dn="cn=hehe,dc=example,dc=com" Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=1 RESULT tag=105 err=10 text= Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on: Feb 11 17:53:09 pinky slapd[9189]: 11r Feb 11 17:53:09 pinky slapd[9189]: Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11 Feb 11 17:53:09 pinky slapd[9189]: connection_read(11): input error=-2 id=1, closing. Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor Feb 11 17:53:09 pinky slapd[9189]: daemon: waked Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=2 UNBIND Feb 11 17:53:09 pinky slapd[9189]: daemon: removing 11 Feb 11 17:53:09 pinky slapd[9189]: conn=1 fd=11 closed

====================================== debian etch

Re: ldap replication

slave сервер при поступлении на него запроса не переправляет его мастеру.  Даже не мытается стукнуться на master(tcpdump не показыавет ни одного пакетика в ту сторону).

из master slapd.conf:
include         /etc/ldap/schema/core.schema
include         /etc/ldap/schema/cosine.schema
include         /etc/ldap/schema/nis.schema
include         /etc/ldap/schema/inetorgperson.schema
include         /etc/ldap/schema/misc.schema
include         /etc/ldap/schema/samba.schema

loglevel        256

suffix          "dc=example,dc=com"

replica   uri=ldap://slave.example:389
                bindmethod=simple
                binddn="cn=replicator,dc=example,dc=com"
                credentials=hehe1234

replogfile      /var/lib/ldap/replog

access to attrs=userPassword,shadowLastChange
        by dn="cn=admin,dc=example,dc=com" write
        by dn="cn=replicator,dc=example,dc=com" write
        by anonymous auth
        by self write
        by * none
access to dn.base="" by * read
access to *
        by dn="cn=admin,dc=example,dc=com" write
        by dn="cn=replicator,dc=example,dc=com" write
        by * read
==========================================

slave slapd.conf отличается лишь этим:
updatedn        "cn=replicator,dc=example,dc=com"
updateref       ldap://master.example.com:389

replica и replogfile в нём не указаны.

=========================================

При изменении базы на master-е, репликация на slave проходит удачно.
Базы идентичны.




slave:/etc/ldap# ldapadd -x -D cn=root,dc=example,dc=com -w hehe1234 -f /tmp/1.ldif 
adding new entry "cn=hehe,dc=example,dc=com"
ldap_add: Referral (10)
        referrals:
                ldap://slave.example.com:389/cn=hehe,dc=example,dc=com


slave syslog:

Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor 
Feb 11 17:53:09 pinky slapd[9189]: daemon: listen=7, new connection on 11 
Feb 11 17:53:09 pinky slapd[9189]: daemon: added 11r (active) listener=(nil) 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 fd=11 ACCEPT from IP=127.0.0.1:1885 (IP=0.0.0.0:389) 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on:
Feb 11 17:53:09 pinky slapd[9189]:  11r
Feb 11 17:53:09 pinky slapd[9189]:  
Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 BIND dn="cn=root,dc=example,dc=com" method=128 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 BIND dn="cn=root,dc=example,dc=com" mech=SIMPLE ssf=0 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=0 RESULT tag=97 err=0 text= 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on:
Feb 11 17:53:09 pinky slapd[9189]:  11r
Feb 11 17:53:09 pinky slapd[9189]:  
Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=1 ADD dn="cn=hehe,dc=example,dc=com"
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=1 RESULT tag=105 err=10 text= 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on:
Feb 11 17:53:09 pinky slapd[9189]:  11r
Feb 11 17:53:09 pinky slapd[9189]:  
Feb 11 17:53:09 pinky slapd[9189]: daemon: read activity on 11 
Feb 11 17:53:09 pinky slapd[9189]: connection_read(11): input error=-2 id=1, closing. 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: activity on 1 descriptor 
Feb 11 17:53:09 pinky slapd[9189]: daemon: waked 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=6 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: daemon: select: listen=7 active_threads=0 tvp=NULL 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 op=2 UNBIND 
Feb 11 17:53:09 pinky slapd[9189]: daemon: removing 11 
Feb 11 17:53:09 pinky slapd[9189]: conn=1 fd=11 closed

======================================
debian etch






markevichus ★★★ ()

Re: ldap replication

>slave сервер при поступлении на него запроса не переправляет его мастеру

Он и не должен. AFAIR, он должен послать туда клиента.

DonkeyHot ★★★★★ ()
Ответ на: Re: ldap replication от DonkeyHot

Re: ldap replication

>послать туда клиента
всмысле? Как я понял, он должен дать ссылку(refferal) клиенту, а тот уже обращается с тем же запросом на master. Клиент в моём случае - ldapadd. Или он(ldapadd) просто не умеет этого делать?

markevichus ★★★ ()
Ответ на: Re: ldap replication от DonkeyHot

Re: ldap replication

Вроде, прорюхал. на samba попробую. Спасибо

markevichus ★★★ ()
Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.