Discussion:
Syncrep size limit exceeded
Darouichi, Aziz
2011-05-26 13:48:19 UTC
Permalink
Hi,


After configuring Openldap -2.4.23 Multi-master Syncrep with TLS. Replication never completes, log shows

slapd[13578]: do_syncrep2: rid=003 (4) Size limit exceeded.


This is slapd.conf


syncrepl rid=002
provider=ldap://xxx.xxx.xxx
tls_cert=/etc/pki/tls/certs/ldapcert.pem
tls_key=/etc/pki/tls/private/ldapkey.pem
tls_cacert=/etc/pki/tls/certs/ldapcert.pem
tls_reqcert=demand
searchbase="dc=establishment,dc=edu"
schemachecking=on
timelimit=unlimited
sizelimit=unlimited
type=refreshAndPersist
retry="60 +"


Thanks,
Aaron Richton
2011-05-26 16:14:20 UTC
Permalink
Post by Darouichi, Aziz
slapd[13578]: do_syncrep2: rid=003 (4) Size limit exceeded.
  provider=ldap://xxx.xxx.xxx
Chris Jacobs
2011-05-26 16:22:15 UTC
Permalink
One can specify a per user size limit - the account used by syncrepl should probably have unlimited specified; if limits are desired otherwise.

e.g.:
limits dn.exact="[cn=syncacct,dc=example,dc=org] size=unlimited time=unlimited

Of course, if you're using your rootdn to do the sync'ing, this is unnecessary (Admin Guide bottom of 9.2 at http://www.openldap.org/doc/admin24/limits.html)

- chris

-----Original Message-----
From: openldap-technical-***@OpenLDAP.org [mailto:openldap-technical-***@OpenLDAP.org] On Behalf Of Aaron Richton
Sent: Thursday, May 26, 2011 9:14 AM
To: Darouichi, Aziz
Cc: openldap-***@openldap.org
Subject: Re: Syncrep size limit exceeded
Post by Darouichi, Aziz
slapd[13578]: do_syncrep2: rid=003 (4) Size limit exceeded.
provider=ldap://xxx.xxx.xxx
This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.
Loading...