Bug 821848

Summary:	modification of olcSyncrepl attribute takes server out of MirrorMode
Product:	Red Hat Enterprise Linux 6	Reporter:	Patrick Hemmer <patrick.hemmer>
Component:	openldap	Assignee:	Jan Vcelak <jvcelak>
Status:	CLOSED ERRATA	QA Contact:	David Spurek <dspurek>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.2	CC:	dspurek, ebenes, jsynacek, tsmetana
Target Milestone:	rc
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:	openldap-2.4.23-29.el6	Doc Type:	Bug Fix
Doc Text:	Cause: Replication in mirror mode is configured for OpenLDAP server (slapd) configuration database (cn=config). Replication configuration (olcSyncrepl) is changed. Consequence: The cn=config database is silently removed from mirror mode and it cannot be longer modified without restarting the slapd daemon. Fix: Upstream patch applied to fix correctly handle the changes of replication configuration. Result: Change of replication configuration preservers the state of mirror mode correctly, cn=config database can be modified with no need to restart the slapd daemon.	Story Points:	---
Clone Of:		Environment:
Last Closed:	2013-02-21 09:45:53 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Patrick Hemmer 2012-05-15 15:04:32 UTC

When slapd is running with cn=config, and "olcMirrorMode: TRUE" is set, whenever you modify an "olcSyncrepl" attribute, the server is silently taken out of MirrorMode, and you are no longer able to edit the cn=config database until slapd is restarted.

This is observed with openldap-servers-2.4.23-20.el6.x86_64

Steps to Reproduce:
1. Create a server with "olcMirrorMode: TRUE" and perform a modification on an "olcSyncrepl" attribute.
2. Then try to modify anything in the cn=config database.

 
Actual results:
"shadow context; no update referral"


Expected results:
No error


Additional info:
This has been reported and fixed upstream
http://www.openldap.org/its/index.cgi/Software%20Bugs?id=7077
http://www.openldap.org/devel/gitweb.cgi?p=openldap.git;a=commitdiff;h=b8f4e78414d59e76d626b3f0ae1c113ba1b1fc2c

Comment 2 RHEL Program Management 2012-05-19 04:04:18 UTC

This request was not resolved in time for the current release.
Red Hat invites you to ask your support representative to
propose this request, if still desired, for consideration in
the next release of Red Hat Enterprise Linux.

Comment 3 Jan Vcelak 2012-07-31 12:33:18 UTC

Confirming. Upstream patch can be applied.

Comment 5 Jan Vcelak 2012-09-25 16:10:25 UTC

Resolved in: openldap-2.4.23-29.el6

Comment 9 errata-xmlrpc 2013-02-21 09:45:53 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2013-0364.html