LDAP settings are being reverted back

Printable View

02-23-2012, 01:53 AM
eim

[SOLVED] LDAP settings are being reverted back: zmldapreplicatool -t off

I'm experiencing a strange behaviour when saving user preferences like mail filters. Actually we run a 4 zimbra servers (7.1.3_GA_3346.UBUNTU10_64 UBUNTU10_64 FOSS editio) in an LDAP environment. One is LDAP master the other three LDAP slaves.

When an user saves it's settings, expecially mail filters on one of the servers (where it's account resides) I can see slapd commits on the LDAP master server like this:

Feb 23 09:19:21 norther slapd[1616]: slap_queue_csn: queing 0x7f8a4e2c6170 20120223081921.152776Z#000000#000#000000
Feb 23 09:19:21 norther slapd[1616]: slap_queue_csn: queing 0x964c668 20120223081921.152776Z#000000#000#000000

which seems OK. Settings are saved. Some time later all settings are lost. It seems like the master LDAP server would revert back all settings we set before. I think the problem has to do with LDAP. Is there anyway for resyncing all LDAP databases between master and slave? Probably in some way the master thinks that settings are old and reverts back previous settings.

I also started fix permissions on all servers thinking that maybe some data could not be saved inside the LDAP DB but didn't solve.

I also get an error like this: lapd[1616]: connection_read(43): no connection! but this has been since we've started using Zimbra and anything worked fine before one month ago.

I want to add that I've updated self signed certificate on the master server some time ago, maybe it's part of the problem.

Thanks for infos.
02-23-2012, 09:48 AM
gnyce

not sure about forcing a sync, but ./libexec/zmreplchk will give you status of ldap replication (based on what the server you run it from thinks). There is also (in same dir) a zmreplicatool... but there doesn't seem to be any documentation on it.
02-23-2012, 11:15 AM
eim

Quote:

Originally Posted by gnyce

not sure about forcing a sync, but ./libexec/zmreplchk will give you status of ldap replication (based on what the server you run it from thinks). There is also (in same dir) a zmreplicatool... but there doesn't seem to be any documentation on it.

thanks for info, I get this:
zimbra@vardar:~$ ./libexec/zmreplchk
Replica: ldap://vardar.unitec.it:389 Code: 6 Status: 0w 6d 11h 21m 17s behind

how can I resync the replica? Logs show TLS auth errors in slapd. Thanks.
02-23-2012, 11:29 AM
eim

Quote:

Originally Posted by eim

thanks for info, I get this:
zimbra@vardar:~$ ./libexec/zmreplchk
Replica: ldap://vardar.unitec.it:389 Code: 6 Status: 0w 6d 11h 21m 17s behind

how can I resync the replica? Logs show TLS auth errors in slapd. Thanks.

SOLVED: /libexec/zmldapreplicatool -t off in 7.1.4.