LDAP Secondary not returning the same as primary with getent passwd

[Dan H. Eicher]

Synopsis: getent passwd {user} works on secondary and primary server, 
getent passwd fails (does not return all users) on secondary, works 
correctly on primary.

getent passwd {username} - works when pointing to both primary and 
secondary.
getent passwd | grep {username} only works if pointed to primary.


On Primary:
% getent passwd | wc
   11482   29170  937571

On Secondary:
% getent passwd | wc
    2039    4994  165383

ldapsearch by uid works in both cases.

The only change I make is changing ldap.conf from ldap01 (primary) to 
ldap02 (secondary).

Any tips appreciated.
Dan

[Aaron Hagopian]

If you do an ldapsearch does it show the same?  My first thought is that
replication doesn't seem to be working properly.



2011/9/6 Dan H. Eicher <dhe(a)cise.ufl.edu&gt;

>  **
>
>  Synopsis: getent passwd {user} works on secondary and primary server,
>  getent passwd fails (does not return all users) on secondary, works
>  correctly on primary.
>
>  getent passwd {username} - works when pointing to both primary and
>  secondary.
>  getent passwd | grep {username} only works if pointed to primary.
>
>  On Primary:
>  % getent passwd | wc
>    11482   29170  937571
>
>  On Secondary:
>  % getent passwd | wc
>     2039    4994  165383
>
>  ldapsearch by uid works in both cases.
>
>  The only change I make is changing ldap.conf from ldap01 (primary) to
>  ldap02 (secondary).
>
>  Any tips appreciated.
>  Dan
>
>
>
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users
>

[Dan H. Eicher]

Ldapsearch returns the same on each server.

A couple of follow on questions...
   Are index's replicated or created on each server?
   Does getent passwd work off of an index?

Dan



On 09/08/2011 02:04 PM, Aaron Hagopian wrote:
>  If you do an ldapsearch does it show the same?  My first thought is 
>  that replication doesn't seem to be working properly.
>
>
>
>  2011/9/6 Dan H. Eicher <dhe(a)cise.ufl.edu <mailto:[e-mail]>>
>
>      Synopsis: getent passwd {user} works on secondary and primary
>      server, getent passwd fails (does not return all users) on
>      secondary, works correctly on primary.
>
>      getent passwd {username} - works when pointing to both primary and
>      secondary.
>      getent passwd | grep {username} only works if pointed to primary.
>
>
>      On Primary:
>      % getent passwd | wc
>        11482   29170  937571
>
>      On Secondary:
>      % getent passwd | wc
>         2039    4994  165383
>
>      ldapsearch by uid works in both cases.
>
>      The only change I make is changing ldap.conf from ldap01 (primary)
>      to ldap02 (secondary).
>
>      Any tips appreciated.
>      Dan
>
>
>
>
>      --
>      389 users mailing list
>      389-users(a)lists.fedoraproject.org
>      <mailto:[e-mail]>
>      https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users

[Rich Megginson]

On 09/08/2011 12:34 PM, Dan H. Eicher wrote:
>  Ldapsearch returns the same on each server.
>
>  A couple of follow on questions...
>    Are index's replicated or created on each server? 
Indexes are not
replicated.
>    Does getent passwd work off of an index? 
use logconv.pl to
scan for unindexed searches and similar problems.
>  Dan
>
>
>
>  On 09/08/2011 02:04 PM, Aaron Hagopian wrote:
> > If you do an ldapsearch does it show the same?  My first thought is 
> > that replication doesn't seem to be working properly.
> >
> >
> >
> > 2011/9/6 Dan H. Eicher <dhe(a)cise.ufl.edu <mailto:[e-mail]>>
> >
> >     Synopsis: getent passwd {user} works on secondary and primary
> >     server, getent passwd fails (does not return all users) on
> >     secondary, works correctly on primary.
> >
> >     getent passwd {username} - works when pointing to both primary
> >     and secondary.
> >     getent passwd | grep {username} only works if pointed to primary.
> >
> >
> >     On Primary:
> >     % getent passwd | wc
> >       11482   29170  937571
> >
> >     On Secondary:
> >     % getent passwd | wc
> >        2039    4994  165383
> >
> >     ldapsearch by uid works in both cases.
> >
> >     The only change I make is changing ldap.conf from ldap01
> >     (primary) to ldap02 (secondary).
> >
> >     Any tips appreciated.
> >     Dan
> >
> >
> >
> >
> >     --
> >     389 users mailing list
> >     389-users(a)lists.fedoraproject.org
> >     <mailto:[e-mail]>
> >     https://admin.fedoraproject.org/mailman/listinfo/389-users
> >
> >
> >
> > --
> > 389 users mailing list
> > 389-users(a)lists.fedoraproject.org
> > https://admin.fedoraproject.org/mailman/listinfo/389-users
>
>
>  --
>  389 users mailing list
>  389-users(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/389-users