I'm seeing some odd behaviour in an import test. I'm seeing that a large number of entries won't import unless the directory is restarted before the import task is performed.
The error appears to be:
[25/Aug/2020:14:14:58.973490600 +1000] - WARN - import_foreman - import userRoot: Skipping entry "cn=group0,ou=Groups,dc=example,dc=com" which has no parent, ending at line 154 of file "/opt/dirsrv/var/lib/dirsrv/slapd-standalone1/ldif/4f8afb8d-ec97-4246-94a2-ec343c0eacb4.ldif"
[25/Aug/2020:14:14:59.307477400 +1000] - INFO - bdb_import_main - import userRoot: Import complete. Processed 14 entries (10 were skipped) in 1 seconds. (14.00 entries/sec)
This is where a newly created backend *with* example entries, then has it's entire content overwriten during an import. Anything that is underneath the ou=* entries is not imported, but the ou= and dc=are fine.
I'm wondering if this is something related to the fact we are replacing the ou= entries with different ids/nsunique ids. IE
aci: (targetattr="cn || member || gidNumber || nsUniqueId || description || ob
jectClass")(targetfilter="(objectClass=groupOfNames)")(version 3.0; acl "Enab
le anyone group read"; allow (read, search, compare)(userdn="ldap:///anyone")
3.0; acl "Enable group_modify to alter members"; allow (write)(groupdn="ldap:
aci: (targetattr="cn || member || gidNumber || description || objectClass")(ta
rgetfilter="(objectClass=groupOfNames)")(version 3.0; acl "Enable group_admin
to manage groups"; allow (write, add, delete)(groupdn="ldap:///cn=group_admi
creatorsName: cn=directory manager
modifiersName: cn=directory manager
Given that these id's are changing I'm wondering if this is somehow breaking our import ordering? Any ideas on where I should start to investigate this?
Senior Software Engineer, 389 Directory Server