Feature #369

Upgrading OpenLDAP and debugging procedures

Added by Nick Milas 6 months ago. Updated 4 months ago.

Status:Closed Start:28/11/2011
Priority:Normal Due date:
Assigned to:Clément OUDOT % Done:

100%

Category:OpenLDAP RPM
Target version:-

Description

Hi,

Just a question: Can we simply upgrade your really fine LTB OpenLDAP releases e.g. from v2.4.26 to .27 by running rpm -Uvh ?

Will upgrade respect (keep safe):

1. Current Configuration (cn=config or slapd.conf based as specified in /usr/local/openldap/etc/openldap/)?
2. Actual data and custom DB_CONFIG file (as maintained by BDB in /usr/local/openldap/var/openldap-data/)?
3. Custom schema directory in default directory (/usr/local/openldap/etc/openldap/)? Default schema directory in our installation includes custom schemas.
4. Customized /etc/default/slapd?
5. Customized ldap.conf (in /usr/local/openldap/etc/openldap/)?
6. Any other custom settings (which?)?

...or we should keep backups and restore after upgrade?

Yes, I know backups are always welcome, but I am wondering about the normal/expected upgrade procedure/behavior.

Also, if we want to use the debugging package in order to do back trace with debugging symbols, is there any suggested practice/methodology?

Please, advise!

Thanks both for your packages and for your assistance,
Nick

History

Updated by Clément OUDOT 6 months ago

  • Category set to OpenLDAP RPM
  • Status changed from New to Assigned
  • Assigned to set to Clément OUDOT

Hi Nick,

of course the upgrade will not touch your configuration. To know why, you can check the openldap-ltb.spec and look for %config macros, that tell RPM not to replace the configuration:

%files -n openldap-ltb
%defattr(-, root, root, 0755)
%{ldapdir}
%config(noreplace) %{ldapserverdir}/etc/openldap/slapd.conf
%config(noreplace) %{ldapserverdir}/etc/openldap/ldap.conf
/etc/init.d/slapd
%config(noreplace) /etc/default/slapd
/etc/profile.d/openldap.sh
%{ldaplogsdir}
%config(noreplace) /etc/logrotate.d/openldap
%{ldapbackupdir}
%exclude %{check_password_conf}
%exclude %{ldapserverdir}/%{_lib}/check_password.so

If we decide to upgrade BDB, then we need to do a backup/restore from the data. But for now, the upgrade is OK.

Updated by Nick Milas 6 months ago

  • Assigned to deleted (Clément OUDOT)

Thanks,

From the info you provided, it seems we'll have to backup/restore the schema directory only, which includes (even slightly) customized versions of standard schemas.

I guess schema dir is not preserved. Right?

Thanks again,
Nick

Updated by Clément OUDOT 6 months ago

Yes, if you modified the schema files provided by OpenLDAP, they are not kept with the upgrade. But if you added custom schema in the schema directory, then no problem with the upgrade.

Updated by Nick Milas 4 months ago

Thanks,

I guess you can close this thread.

Regards,
Nick

Updated by Clément OUDOT 4 months ago

  • Status changed from Assigned to Closed
  • Assigned to set to Clément OUDOT
  • % Done changed from 0 to 100

Also available in: Atom PDF