Dears,

Openldap version : 2.5.7 

env 2 MMR 2 Replicas (test env)

I've set and olclimit for one user (dn.base)  on my DB and it works fine but in 
order to move it on my production env, I decided to modify my olclimit by using 
(group/groupOfNames/member) and place this user as member of the group. This is 
also works fine on my test env.

I did the same config on my production env which is 4 MMR 4 Replicas and it 
didn't work :-(

I did a lot of checks to see if there was any difference but it was exactly the 
same configuration.
I did some other test on replicas first by adding a new olclimit for the 
concerned user ( dn.base) which solved the issue. 
I decided to remove this newly user olclimit, the olclimit  
(group/groupOfNames/member) was still there, and was not my surprise, the 
limitation for my user was still set to unlimited as expected.
I did the same on all replicas, adding concerned user, remove it and limits 
were OK .... very strange.
As it was working on replicas, I did try the same on master but no luck, my 
user stay still limited to 500 entries.

Questions :
Is there an order to respect in olclimit type ?
why the config is working on test env and not on production one ?

Thx to advice,
Jean-Luc

Reply via email to