697008 - LDAP slaves sometimes don't replicate properly.

Status: RESOLVED FIXED

(mozilla.org Graveyard :: Server Operations, task)

Description

[Cameron McCormack (:heycam)]

Something odd is happening with my LDAP password.  I reset it earlier today, and at the moment I can use my new password to access, for example, phonebook.mozilla.org but not intranet.mozilla.org.  I am sure I am typing the password correctly. :)

Comment 1

[Justin Dow [:jabba]]

I think I got your specific LDAP entry fixed, but I'm still investigating the actual flow that caused the inconsistency in the first place. I'll keep this bug open to track that.

Comment 2

[Cameron McCormack (:heycam)]

Thanks for fixing it for my account.

Comment 3

[Justin Dow [:jabba]]

After consulting with a developer in #openldap on freenode, we tracked this down to being an issue with one of the intermediary ldap servers having a clock that was off a bit. Since it is a virtual machine, it tends to skew quite a bit. We enabled clock syncing via vmware tools and I installed a nagios check to check that the clock on all ldap hosts is in sync. That should mitigate the problem and I am working on writing a better nagios check to catch individual occurances of this type of problem.