Hi, Tim. I didn't have time to peruse this (still under a nasty deadline) but I was looking for one thing I didn't see in your post. I'm pulling this from memory so please double check it but did you enable the presence attribute (?) for indexing on all the items listed i the referential integrity plugin? By the way, if I might mention it, would you kindly post to the bottom of future threads. Top posting makes it very difficult for newcomers to the list to follow. Thanks - John On Tue, 2009-02-03 at 12:24 -0500, Tim Hartmann wrote: > Well then! Let me give you my experiences so far.... > > So I attempted to add "memberuid" to the plugin on the master I wanted > to use it on... and that went fine. restarted the server, I added index > on all my servers for the memberuid attribute, ( I thought I might be > able to get away with indexing on just the master that was going to run > the Referential Integrity plugin, but I figured I'd keep my > configuration as consistent as possible accross both master + > replicas). I then enabled the plug in on the console, and then ran > "/etc/init.d/dirsrv restart" So far, i felt like I was pretty much just > follow word for work the instructions in the manual. > > For my testing, I have: > > 3 Directories > > dc=dept,dc=school,dc=edu > dc=sub,dc=school,dc=edu > cn=Databaseinfo,dc=school,dc=edu > > All three server diffrent clients, though some user name overlap, and a > change in one, shouldn't necessarily be reflected in it's neighbor. > > For testing I have a user I want to delete in dept > > uid=User,ou=People,dc=dept,dc=school,dc=edu > and he's a member of a Posix style group in depts as (under the base > ou=Group,dc=dept,dc=school,dc=edu_ and the same username (User) is a > member of a similar group under ou=Group,dc=school,dc=edu, I added him > there to see if the plug in would traverse directories or not. > > The things I noticed after I restarted and delete the user were this: > > First, once I deleted the user, my redhat-idm-console interface went a > little wonky, only rendering part of the screen until I did a "refresh > all " from the view menu , It also spit out to STDOUT the following > java errors, which it's never done before: > > > Exception in thread "AWT-EventQueue-0" java.lang.NullPointerException > at > javax.swing.plaf.basic.BasicTreeUI.ensureRowsAreVisible(BasicTreeUI.java:1904) > at > javax.swing.plaf.basic.BasicTreeUI.toggleExpandState(BasicTreeUI.java:2223) > at > javax.swing.plaf.basic.BasicTreeUI.handleExpandControlClick(BasicTreeUI.java:2206) > at > javax.swing.plaf.basic.BasicTreeUI.checkForClickInExpandControl(BasicTreeUI.java:2160) > at > javax.swing.plaf.basic.BasicTreeUI$Handler.handleSelectionImpl(BasicTreeUI.java:3498) > at > javax.swing.plaf.basic.BasicTreeUI$Handler.handleSelection(BasicTreeUI.java:3483) > at > javax.swing.plaf.basic.BasicTreeUI$Handler.mousePressed(BasicTreeUI.java:3464) > at > java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:254) > at > java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:253) > at java.awt.Component.processMouseEvent(Component.java:5544) > at javax.swing.JComponent.processMouseEvent(JComponent.java:3148) > at java.awt.Component.processEvent(Component.java:5312) > at java.awt.Container.processEvent(Container.java:2001) > at java.awt.Component.dispatchEventImpl(Component.java:4014) > at java.awt.Container.dispatchEventImpl(Container.java:2059) > at java.awt.Component.dispatchEvent(Component.java:3847) > at > java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4249) > at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3926) > at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3859) > at java.awt.Container.dispatchEventImpl(Container.java:2045) > at java.awt.Window.dispatchEventImpl(Window.java:1812) > at java.awt.Component.dispatchEvent(Component.java:3847) > at java.awt.EventQueue.dispatchEvent(EventQueue.java:545) > at > java.awt.EventDispatchThread.pumpOneEventForHierarchy(EventDispatchThread.java:268) > at > java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:197) > at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:191) > at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:183) > at java.awt.EventDispatchThread.run(EventDispatchThread.java:144) > > > Next, I noticed that /var/log/dirsrv/slapd-instance/referint > > Log file did not get created, so I created an empty file, restarted the > directory, deleted all the data out of "dept" re added it all with an > ldapmodify from a backup ldif i have for testing, and then once again > tried to delete "user" > > "User" deleted ok, I saw the same behavior from the GUI interface, and > when I checked the groups that contained user, he hadn't been removed. > Nor had any content been added to the > /var/log/dirsrv/slapd-us72/referint file. > > So at the moment, it looks like Referential Integrity isn't working at > all for me.... and i'm a little worried about the Java error, and more > sluggish behavior that my GUI Console is exiting.. > > Additionally, I didn't see anything in access or error logs, that might > indicate whats going on.. > > Any thoughts? > > Tim > > > > > > > John A. Sullivan III wrote: > > Sorry I can't be more help but I am listening! We use referential > > integrity but have not yet implemented it in multi-master mode nor have > > we really stressed and tested it - John > > > > > > > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users -- John A. Sullivan III Open Source Development Corporation +1 207-985-7880 jsullivan at opensourcedevel.com http://www.spiritualoutreach.com Making Christianity intelligible to secular society