On Fri, Apr 04, 2025 at 05:29:03AM +0000, Windl, Ulrich wrote:
> Hi!
>
> While setting up an OpenLDAP-2.5-based MMR configuration I had set up
> the master node, then dumped the config database, copied the LDIF to
> the other node. However when starting slapd, it failed with the
> message
> slapd[2734]: config error processing olcDatabase={0}config,cn=config:
> <olcMultiProvider> database is not a shadow
>
> See also https://stackoverflow.com/q/6792212/6607497
>
> The context of olcMultiProvider is:
> dn: olcDatabase={0}config,cn=config
> objectClass: olcDatabaseConfig
> olcDatabase: {0}config
> ...
> olcMultiProvider: TRUE
>
> On the first node I had updated the config using this LDIF:
> dn: olcDatabase=${db},cn=config
> changetype: modify
> delete: olcMirrorMode
> olcMirrorMode: TRUE
> -
> add: olcMultiProvider
> olcMultiProvider: TRUE
Hi Ulrich,
olcMirrorMode and olcMultiProvider are two names for the same attribute,
you can get switched over just by slapcat+slapadd'ing the configuration.
> So I don't understand why this won't work on the second node.
> Specifically I can restart the first node without an issue. The only
> difference is that the primary node has a patch against crashing on an
> invalid olcAuthzRegexp (I had reported).
>
> Well can anybody explain what this message means?
It's saying you probably don't have an effective olcSyncrepl attribute
on the database in question so it's not a "shadow" (doesn't replicate
from anyone). This requirement will be softened somewhat in 2.7 (see
ITS#9729).
Regards,
--
Ondřej Kuzník
Senior Software Engineer
Symas Corporation http://www.symas.com
Packaged, certified, and supported LDAP solutions powered by OpenLDAP
