Actions
Task #11762
closed
The LDAP server, when in producer (master) mode, never removes the log files used to handle the replica changes
Status:
Closed
Priority:
Urgent
Assignee:
Category:
System Application
Target version:
Start date:
May 13, 2018
Due date:
% Done:
100%
Estimated time:
Infrastructure:
Production
Description
ldap uses a specialised set of log files, under /var/lib/ldap/accesslog, so that the consumers are able to get the changes without downloading all the DB at every synchronisation.
Those files are never removed by the master on our server, even if it's configured to delete logs older than two days. The only way to cleanly remove those files is to stop / start the slapd service.
Because those logs amount to tens of GBs of files, the stop / start procedure always fails because the slapd service needs several minutes to cleanup the accesslog before shutting down.
We have to find a way to restart the service reliably.
Updated by
Actions
