1

Topic: OpenLDAP Replication issue

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release):      0.9.8
- Linux/BSD distribution name and version: CentOS Linux release 7.5.1804 (Core)
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):  LDAP
- Web server (Apache or Nginx): Nginx
- Manage mail accounts with iRedAdmin-Pro? - Yes
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hi,

I have set replication having master-slave scenario where I can see all accounts and maillists are automatically populated from master to slave server and the same is visible in Admin-Pro panel.

However when I try to go into any maillist or settings of maillist it just throws error as:
Error: Account does not exist. on Admin-Pro panel.

The same settings and member list I can access on Master server which works fine.

Here are settings which have been applied on both servers:

Master:

#
# Default indexes.
#
index objectclass                                   eq
index uidNumber,gidNumber,uid,memberUid,loginShell  eq,pres
index homeDirectory,mailMessageStore                eq,pres
index ou,cn,mail,surname,givenname,telephoneNumber,displayName  eq,pres,sub
index nisMapName,nisMapEntry                        eq,pres,sub
index shadowLastChange                              eq,pres
index member,uniqueMember eq,pres
#index mailingListID eq

#
# Index for mail attrs.
#
# Domain object
index domainName,mtaTransport,accountStatus,enabledService,disabledService  eq,pres,sub
index domainAliasName    eq,pres,sub
index domainMaxUserNumber eq,pres
index domainAdmin,domainGlobalAdmin,domainBackupMX    eq,pres,sub
index domainSenderBccAddress,domainRecipientBccAddress  eq,pres,sub

# Group object
index accessPolicy,hasMember,listAllowedUser,mailingListID   eq,pres,sub

# User object
index mailForwardingAddress,shadowAddress   eq,pres,sub
index backupMailAddress,memberOfGroup   eq,pres,sub
index userRecipientBccAddress,userSenderBccAddress  eq,pres,sub

moduleload syncprov
index entryCSN,entryUUID, eq
overlay syncprov
syncprov-checkpoint 100 10
syncprov-sessionlog 200

Slave:

syncrepl   rid=001
           provider=ldap://10.0.0.40:389
           searchbase="dc=mydomain,dc=co,dc=uk"
           bindmethod=simple
           binddn="cn=vmail,dc=mydomain,dc=co,dc=uk"
           credentials=password
           schemachecking=off
           filter="(objectClass=*)"
           type=refreshAndPersist
           retry="5 10 60 +"
           scope=sub
           interval=00:00:10:00
           attrs="*,+"
           timeout=1

All email accounts are perfectly synced and accessible on both servers, it's just maillist which is getting stuck somewhere.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: OpenLDAP Replication issue

I think it is something related to mlmmj maillist or its openldap management which might be causing this issue. As when I tried removing maillist from slave server it did not populate from master server. That means its not replicating anything from master server. Something needs to be configured to allow replication of maillist.

3

Re: OpenLDAP Replication issue

For mlmmj mailing lists, you need to sync /var/vmail/mlmmj (and mlmmj-archive) too.

4

Re: OpenLDAP Replication issue

Yes I synced both directories from primary to secondary via rsync which runs every minute. It fetches everything fine however, if any maillist is migrated to mlmmj on master server that is not reflecting on slave server. Can you guide what could be the cause? Rest of the user / domain activities are perfectly replicating from master to slave server.

5

Re: OpenLDAP Replication issue

I found some variations on LDIF on Admin-Pro panel which are attached with this.

Primary server has different ldif and secondary slave replication server has different ldif.

How can this be rectified?

Post's attachments

primary server.png
primary server.png 9.25 kb, file has never been downloaded. 

secondary server.png
secondary server.png 6.52 kb, 1 downloads since 2018-10-06 

You don't have the permssions to download the attachments of this post.

6

Re: OpenLDAP Replication issue

Attached are slapd.conf files of primary and secondary server for review.

Post's attachments

Primary-slapd.conf 8.08 kb, 7 downloads since 2018-10-06 

Secondary-slapd.conf 8.4 kb, 6 downloads since 2018-10-06 

You don't have the permssions to download the attachments of this post.