Date: Mon, 07 Jun 2021 18:50:26 +0800 From: Philip Paeps <philip@freebsd.org> To: Per olof Ljungmark <peo@nethead.se> Cc: ports@FreeBSD.org Subject: Re: Need to revert openldap-server to 2.57 Message-ID: <600612BC-3E24-4001-849B-91CA773C1B78@freebsd.org> In-Reply-To: <d2382fd8-78fc-8ffb-8d22-f05db2d9adb4@nethead.se> References: <bbd334f5-c432-b312-f948-1555b2d524e7@nethead.se> <4784372B-1E24-4B2B-BB5F-3104864C1E4C@freebsd.org> <d2382fd8-78fc-8ffb-8d22-f05db2d9adb4@nethead.se>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2021-06-07 18:32:18 (+0800), Per olof Ljungmark wrote: > On 6/7/21 12:11 PM, Philip Paeps wrote: >> On 2021-06-07 17:47:57 (+0800), Per olof Ljungmark wrote: >>> A bit urgent... >>> >>> After updating to openldap-server 2.59 slapd refuses to start, how >>> can I revert to 2.57 with ports and git while troubleshooting the >>> update? >> >> You're probably running into the same issue I ran into this weekend >> when I upgraded the FreeBSD.org cluster's ldap-master. >> >> The problem we had that openldap24-server since 2.4.58_2 wants to >> build all overlays as modules. We use the syncprov module in our >> configuration for replication. That by itself isn't too exciting >> ... except that we also store the configuration inside LDAP. >> >> I rebuilt openldap24-server without DYNAMIC_MODULES and with >> SYNCPROV. That didn't work either because we expect the mdb backend >> to be loaded as a module. Second try: with DYNAMIC_BACKENDS, >> without DYNAMIC_MODULES, with SYNCPROV. That worked. >> >> Give that a go. >> >> Meanwhile, if you have to downgrade, you can always do a pkg install >> /var/db/pkg/openldap-version-that-worked. > > Well thanks a lot! But then, why DYNAMIC_BACKENDS marked as > DEPRECATED? > > Anyway, thanks again, saved my day. As I understand it, DYNAMIC_BACKENDS predates DYNAMIC_MODULES and is a subset of it. With DYNAMIC_BACKENDS, you only build the backends as modules but you compile in the overlays. With DYNAMIC_MODULES, both the backends and the overlays are built as modules. Going from the configuration we (and possibly you?) have to DYNAMIC_MODULES may be a little bit interesting though. To modify the configuration to dynamically load the overlay, we'll have to be running a slapd with the overlay statically built in. And we'll need to do this a little bit carefully because the replicas also replicate the config. For now I will keep DYNAMIC_BACKENDS but leave DYNAMIC_MODULES off. It's a little ... disruptive ... when LDAP goes down. :) Philip -- Philip Paeps Senior Reality Engineer Alternative Enterprises
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?600612BC-3E24-4001-849B-91CA773C1B78>