一般而言,生产环境中,ldap server都部署2台,做主从配置,这样可以提供目录服务的高可用性,两台ldap服务器之间自动同步数据。配置openldap主从结构,或许网上会有很多的文章或者博客介绍,但是绝大部分都是基于2.3的版本,注意2.3的主从配置是不适用于2.4的,所以如果要使用openldap2.4配置主从结构,在搜索的时候要注意。然而,即使百度了也会发现,网上只有寥寥几篇关于 openldap 2.4的主从配置文档,而且还都是浅尝辄止,当然,文章的作者可能已经对配置神而明之了,但是读者看了之后绝对会“晕而乎之”的,大多数的高手就甩给你一个slapd.conf针对replication的配置,然后就没有然后了。没辙,为了能get这个技能,只有×××了,Google了一下,其实有用的也就是官方的administrator手册,看手册是最能理解replication是怎么一回事儿的,但是前提是你有耐心,而且英语可以还不能较真(因为里面的句子真心觉得翻译起来不是那么回事儿),好吧,原来Google上关于这方面的文档也不是很多,最后也只能看官方手册,然后自己动手了。

本文的目的是:按照文章中的步骤,一步一步的操作,最终能把replication配置成功。

主机名IP地址角色操作系统
ldapsrv01.contoso.com192.168.49.138MasterCentOS 6.5
ldapsrv02.contoso.com192.168.49.139SlaveCentOS 6.5

1、准备工作

以下命令要在两台CentOS上都操作一遍。

/etc/init.d/iptables stop

chkconfig iptables off

#关闭iptables防火墙

sed -i '/^SELINUX/s/enforcing/disabled/' /etc/selinux/config

setenforce 0

#关闭selinux

vi /etc/sysconfig/network

#HOSTNAME=[]

hostname []

#修改主机名HOSTNAME,分别修改为ldapsrv01.contoso.com和ldapsrv02.contoso.com

vi /etc/hosts 

添加如下两行:

192.168.49.138   ldapsrv01.contoso.com   ldapsrv01

192.168.49.139   ldapsrv02.contoso.com   ldapsrv02

2、安装openldap

这里安装就使用之前的脚本来进行自动化安装了,脚本在之前的文章中,两台CentOS都需要安装。

chmod +x openldap_install.sh 

./openldap_install.sh 

[root@ldapsrv01 ~]# ./openldap_install.sh 

Please input your domain name:contoso.com

Install openldap package successful.

Service slapd start successful.

Please input the password for the administrator in your domain:123456

Change settings of rsyslog successful.

config file testing succeeded

Slaptest with configure file successful.

Start slapd service successful.

3、导入数据

[root@ldapsrv01 ~]# cat base.ldif 

dn: dc=contoso,dc=com

dc: contoso

objectClass: top

objectClass: domain


dn: ou=People,dc=contoso,dc=com

ou: People

objectClass: top

objectClass: organizationalUnit


dn: ou=Group,dc=contoso,dc=com

ou: Group

objectClass: top

objectClass: organizationalUnit


dn: cn=tech,ou=group,dc=contoso,dc=com

objectClass: posixGroup

description: Technology

gidNumber: 10001

cn: tech


[root@ldapsrv01 ~]# cat group.ldif 

dn: cn=user1,ou=Group,dc=contoso,dc=com

objectClass: posixGroup

objectClass: top

cn: user1

userPassword: {crypt}x

gidNumber: 10011


dn: cn=user2,ou=Group,dc=contoso,dc=com

objectClass: posixGroup

objectClass: top

cn: user2

userPassword: {crypt}x

gidNumber: 10012


dn: cn=user3,ou=Group,dc=contoso,dc=com

objectClass: posixGroup

objectClass: top

cn: user3

userPassword: {crypt}x

gidNumber: 10013


[root@ldapsrv01 ~]# cat people.ldif 

dn: uid=user1,ou=People,dc=contoso,dc=com

uid: user1

cn: user1

objectClass: account

objectClass: posixAccount

objectClass: top

objectClass: shadowAccount

userPassword: {crypt}$6$Zs9mXyPO$QdqHS8nA/vyjUdnSWLIpM4QiaPtsca1WllXu0dWQOgTza2Qr4TcC3sHbAbJsWI0KannwnM.zFFroqxzglFfJT0

shadowLastChange: 17053

shadowMin: 0

shadowMax: 99999

shadowWarning: 7

loginShell: /bin/bash

uidNumber: 10011

gidNumber: 10011

homeDirectory: /home/user1


dn: uid=user2,ou=People,dc=contoso,dc=com

uid: user2

cn: user2

objectClass: account

objectClass: posixAccount

objectClass: top

objectClass: shadowAccount

userPassword: {crypt}$6$0dHBettP$u4vVTWuVkRN8NGIecG5O7VSnFDCtcQF/623lLY4Ih6RXORfFcRxh9fFdvssYeg6QAw1KY4LKtk.zwzdVXH2rh1

shadowLastChange: 17053

shadowMin: 0

shadowMax: 99999

shadowWarning: 7

loginShell: /bin/bash

uidNumber: 10012

gidNumber: 10012

homeDirectory: /home/user2


dn: uid=user3,ou=People,dc=contoso,dc=com

uid: user3

cn: user3

objectClass: account

objectClass: posixAccount

objectClass: top

objectClass: shadowAccount

userPassword: {crypt}$6$CXSotuEN$QSo5gJFlsJ6uZhqaK8qDto.5u2WXwvWSV1JqVP9WMOUVhxZXY8I.XMEUojwGGwpSYY1OtY2Sl/J7dzSk1ey6F/

shadowLastChange: 17053

shadowMin: 0

shadowMax: 99999

shadowWarning: 7

loginShell: /bin/bash

uidNumber: 10013

gidNumber: 10013

homeDirectory: /home/user3


[root@ldapsrv01 ~]# ldapadd -x -D "cn=admin,dc=contoso,dc=com" -w123456 -f base.ldif 

adding new entry "dc=contoso,dc=com"


adding new entry "ou=People,dc=contoso,dc=com"


adding new entry "ou=Group,dc=contoso,dc=com"


adding new entry "cn=tech,ou=group,dc=contoso,dc=com"


[root@ldapsrv01 ~]# ldapadd -x -D "cn=admin,dc=contoso,dc=com" -w123456 -f group.ldif 

adding new entry "cn=user1,ou=Group,dc=contoso,dc=com"


adding new entry "cn=user2,ou=Group,dc=contoso,dc=com"


adding new entry "cn=user3,ou=Group,dc=contoso,dc=com"


[root@ldapsrv01 ~]# ldapadd -x -D "cn=admin,dc=contoso,dc=com" -w123456 -f people.ldif 

adding new entry "uid=user1,ou=People,dc=contoso,dc=com"


adding new entry "uid=user2,ou=People,dc=contoso,dc=com"


adding new entry "uid=user3,ou=People,dc=contoso,dc=com"


当然,你可以在两台server分别进行导入,或者在一台server上进行导入,然后再将数据导出到一个ldif文件中,然后导入到另外一台server上,这个就不再多做说明了,注意,要保证两台server上的数据是一致的。

ldapsearch -x -b "dc=contoso,dc=com"

# 可以在两个ldap server上查询,可结果是否一致

注:这里的数据并非一定按照我贴出来的,只是说ldap中要有数据,而且两个ldap server要保持一致。

4、配置Master replica

cp /etc/openldap/slapd.conf /etc/openldap/slapd.conf.bak$(date +%F)

vi /etc/openldap/slapd.conf

[root@ldapsrv01 ~]# diff /etc/openldap/slapd.conf.bak2016-09-20 /etc/openldap/slapd.conf

35c35

< # modulepath /usr/lib64/openldap

---

> modulepath /usr/lib64/openldap

57c57

< # moduleload syncprov.la

---

> moduleload syncprov.la

135a136,140

> # master replia server start

> overlay syncprov

> syncprov-checkpoint 100 10

> syncprov-sessionlog 100

注:这里对slapd.conf文件所做的修改如下:

     1)取消了modulepath /usr/lib64/openldap之前的注释

     2)取消了moduleload syncprov.la之前的注释

     3)在index nisMapName,nisMapEntry            eq,pres,sub这一行之后添加如下内容:      

            # master replia server start

            overlay syncprov

            syncprov-checkpoint 100 10

            syncprov-sessionlog 100


rm -rf /etc/openldap/slapd.d/*

#我这里没有备份,如果是生产环境,也可以先做备份再进行删除

slaptest -u

slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/

chown -R ldap. /etc/openldap/slapd.d/

注意:如果上面两条命令的结果都是succeeded(如下)的话,就可以重新启动slapd服务了。

[root@ldapsrv01 ~]# slaptest -u

config file testing succeeded

[root@ldapsrv01 ~]# slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/

config file testing succeeded

如果上面的操作不成功,就需要根据错误信息重新编辑slapd.conf文件。

service slapd restart

#最后一步,重启slapd服务,至此主节点的配置完成。

5、配置Slave replica

cp /etc/openldap/slapd.conf /etc/openldap/slapd.conf.bak$(date +%F)

vi /etc/openldap/slapd.conf

[root@ldapsrv02 ~]# diff /etc/openldap/slapd.conf.bak2016-09-20 /etc/openldap/slapd.conf

35c35

< # modulepath /usr/lib64/openldap

---

> modulepath /usr/lib64/openldap

57c57

< # moduleload syncprov.la

---

> moduleload syncprov.la

135a136,138

> # slave replica statement start

> syncrepl  rid=123 provider=ldap://ldapsrv01.contoso.com:389  type=refreshOnly    interval=00:00:01:00      searchbase="dc=contoso,dc=com"scope=sub  attrs="*"    schemachecking=off      bindmethod=simplebinddn="cn=admin,dc=contoso,dc=com"  credentials=123456

注:这里对slapd.conf文件所做的修改如下:

         1)取消了modulepath /usr/lib64/openldap之前的注释

         2)取消了moduleload syncprov.la之前的注释

         3)在index nisMapName,nisMapEntry            eq,pres,sub这一行之后添加如下内容:    

             # slave replica statement start

             syncrepl  rid=123                                                                                           provider=ldap://ldapsrv01.contoso.com:389                                                   type=refreshOnly                                                                           interval=00:00:01:00                                                                       searchbase="dc=contoso,dc=com"                                                             scope=sub                                                                                   attrs="*"                                                                                   schemachecking=off                                                                         bindmethod=simple                                                                           binddn="cn=admin,dc=contoso,dc=com"                                                         credentials=123456

         4)注意,上面的syncrepl是在一行中,虽然排版上进行了调整,但是不是换行而是tab。


rm -rf /etc/openldap/slapd.d/*

slaptest -u

slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/

chown -R ldap. /etc/openldap/slapd.d/

service slapd restart

注意:可能在配置过程中出现如下错误:

[root@ldapsrv02 ~]# slaptest -f /etc/openldap/slapd.conf -F /etc/openldap/slapd.d/

57e0be4f syncrepl rid=123 searchbase="dc=contoso,dc=com": no retry defined, using default

config file testing succeeded

[root@ldapsrv02 ~]# service slapd restart

Stopping slapd:                                            [  OK  ]

Checking configuration files for slapd:                    [WARNING]

57e0be7b syncrepl rid=123 searchbase="dc=contoso,dc=com": no retry defined, using default

config file testing succeeded

Starting slapd:                                            [  OK  ]

上面的错误提示,是没有指定retry参数,但是我试着添加了retry参数也还是这个错误,但是经测试这个不影响主从同步的运行,所以不做过多的处理。

6、测试主从同步

i.在Master上导入一个新的用户

[root@ldapsrv01 ~]# cat test.ldif 

dn: uid=test,ou=People,dc=contoso,dc=com

uid: test

cn: test

objectClass: account

objectClass: posixAccount

objectClass: top

objectClass: shadowAccount

userPassword:: e2NyeXB0fSQ2JENYU290dUVOJFFTbzVnSkZsc0o2dVpocWFLOHFEdG8uNXUyV1h

 3dldTVjFKcVZQOVdNT1VWaHhaWFk4SS5YTUVVb2p3R0d3cFNZWTFPdFkyU2wvSjdkelNrMWV5NkYv

shadowLastChange: 17053

shadowMin: 0

shadowMax: 99999

shadowWarning: 7

loginShell: /bin/sh

uidNumber: 10077

gidNumber: 10001

homeDirectory: /home/test

[root@ldapsrv01 ~]# ldapadd -x -D "cn=admin,dc=contoso,dc=com" -w123456 -f test.ldif 

adding new entry "uid=test,ou=People,dc=contoso,dc=com"

ii.在Master和Slave上分别进行查询

[root@ldapsrv01 ~]# ldapsearch -x -H ldap://ldapsrv01.contoso.com -b "dc=contoso,dc=com" |grep uid=test

dn: uid=test,ou=People,dc=contoso,dc=com

[root@ldapsrv01 ~]# ldapsearch -x -H ldap://ldapsrv02.contoso.com -b "dc=contoso,dc=com" |grep uid=test

dn: uid=test,ou=People,dc=contoso,dc=com

iii.在Master上删除刚刚创建的用户

[root@ldapsrv01 ~]# ldapdelete -x -D "cn=admin,dc=contoso,dc=com" -w123456 "uid=test,ou=People,dc=contoso,dc=com"

iv.在Master和Slave上再进行查询

[root@ldapsrv01 ~]# ldapsearch -x -H ldap://ldapsrv01.contoso.com -b "dc=contoso,dc=com" |grep uid=test

[root@ldapsrv01 ~]# ldapsearch -x -H ldap://ldapsrv02.contoso.com -b "dc=contoso,dc=com" |grep uid=test

测试结果,主从配置成功。

补充:由于在syncrepl中slave是refreshOnly,相当于从节点是只读的,这时不允许在从节点导入或者删除用户,否则会出现错误,如下所示。

[root@ldapsrv02 ~]# ldapadd -x -D "cn=admin,dc=contoso,dc=com" -w123456 -f test.ldif 

adding new entry "uid=test,ou=People,dc=contoso,dc=com"

ldap_add: Server is unwilling to perform (53)

additional info: shadow context; no update referral

[root@ldapsrv02 ~]# ldapdelete -x -D "cn=admin,dc=contoso,dc=com" -w123456 "uid=test,ou=People,dc=contoso,dc=com"

ldap_delete: Server is unwilling to perform (53)

additional info: shadow context; no update referral

7、ldap同步日志记录

Sep 20 13:21:43 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:21:43 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => bdb_filter_candidates

Sep 20 13:21:43 ldapsrv02 slapd[1792]: #011AND

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => bdb_list_candidates 0xa0

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => bdb_filter_candidates

Sep 20 13:21:43 ldapsrv02 slapd[1792]: #011EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= bdb_equality_candidates: (entryUUID) not indexed

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= bdb_filter_candidates: id=-1 first=1 last=11

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= bdb_list_candidates: id=-1 first=1 last=11

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= bdb_filter_candidates: id=-1 first=1 last=11

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 5

Sep 20 13:21:43 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:21:43 ldapsrv02 slapd[1792]:     EQUALITY

Sep 20 13:21:43 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:22:43 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:22:43 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:22:43 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 busy

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: listen=8, new connection on 11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: added 11r (active) listener=(nil)

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 fd=11 ACCEPT from IP=[::1]:42504 (IP=[::]:389)

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]:  11r

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: read active on 11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 op=0 BIND dn="" method=128

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 op=0 RESULT tag=97 err=0 text=

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]:  11r

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: read active on 11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: begin get_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]: PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: end get_filter 0

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 op=1 SRCH base="dc=contoso,dc=com" scope=2 deref=0 filter="(objectClass=*)"

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => bdb_filter_candidates

Sep 20 13:23:31 ldapsrv02 slapd[1792]: #011AND

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => bdb_list_candidates 0xa0

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => bdb_filter_candidates

Sep 20 13:23:31 ldapsrv02 slapd[1792]: #011PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= bdb_filter_candidates: id=-1 first=1 last=11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= bdb_list_candidates: id=-1 first=1 last=11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= bdb_filter_candidates: id=-1 first=1 last=11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: => test_filter

Sep 20 13:23:31 ldapsrv02 slapd[1792]:     PRESENT

Sep 20 13:23:31 ldapsrv02 slapd[1792]: <= test_filter 6

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 op=1 SEARCH RESULT tag=101 err=0 nentries=10 text=

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]:  11r

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: read active on 11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 op=2 UNBIND

Sep 20 13:23:31 ldapsrv02 slapd[1792]: connection_closing: readying conn=1001 sd=11 for close

Sep 20 13:23:31 ldapsrv02 slapd[1792]: connection_resched: attempting closing conn=1001 sd=11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: connection_close: deferring conn=1001 sd=11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on 1 descriptor

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: activity on:

Sep 20 13:23:31 ldapsrv02 slapd[1792]: 

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=8 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: epoll: listen=9 active_threads=0 tvp=zero

Sep 20 13:23:31 ldapsrv02 slapd[1792]: connection_resched: attempting closing conn=1001 sd=11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: daemon: removing 11

Sep 20 13:23:31 ldapsrv02 slapd[1792]: conn=1001 fd=11 closed

Sep 20 13:23:39 ldapsrv02 slapd[1792]: daemon: epoll: listen=7 active_threads=0 tvp=zero