During a Server Admin initiated open directory "archive" operation I
noticed that slapcat crashes. Upon inspecting the archive I notice
that the ldap dump is incomplete - it ends in the middle of the data
of an attribute.
The output buffers probably aren't flushed when the crash happens.
If the problem is due to erroneous data within the database, it's at
some point after the end of the dump that you are inspecting.
Is the dump usually about the same size?
If I manually execute a slapcat by itself on the command-line it
also segfaults, but it appears to dump the database fine (at least,
there are no mid-record truncations - the LDIF appears to end on an
OU boundary).
Did it actually give you the whole database, or did it just stop
generating output on a boundary? Do you have a method to verify that
all the records are in your slapcat output?
If you are absolutely sure that you got everything you can use the
output from slapcat to rebuild the LDAP component of your OD.
This machine is by and large "pristine" - freshly migrated from a
10.3 (I know, behind the times) OD server with a method similar to
many accounted "manual" OD migration processes, such as that on
AFP548.
How difficult would it be for you to repeat the process? You might
consider migrating in a test environment to see if the problems
reoccur.
I have not yet had a chance to try a simple reboot.
I doubt this would resolve it, but it wouldn't hurt to try.
Any ideas?
You could try the bdb-level utilities on the database. The LDAP data
is stored in /var/db/openldap/openldap-data. Open a terminal window
and log in as root. Make a backup (cp -Rp) of the openldap-data
directory before trying anything. Then use the db_verify or the
db_recover utilities to inspect and repair the database. Check out
the man pages for more details.
Do you have an OD replica? If so, you could possibly use the LDAP
database from the replica and push it onto the master.
--
Matt Richard
Access and Security Coordinator
Computing Services
Franklin & Marshall College
email@hidden
(717) 291-4157
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
