]> git.sur5r.net Git - openldap/blobdiff - servers/slapd/syncrepl.c
Fix prev commit, cleanup fakeroot entry before freeing
[openldap] / servers / slapd / syncrepl.c
index f3505c5b1fc6df5bbc2cf920d4bbb61b2cfb15f2..4d9f28b3b73e750c6b93b98a5c6cadfb4b00e828 100644 (file)
@@ -60,6 +60,7 @@ typedef struct cookie_state {
 typedef struct syncinfo_s {
        struct syncinfo_s       *si_next;
        struct slap_backend_db *si_be;
+       struct slap_backend_db *si_wbe;
        struct re_s                     *si_re;
        int                                     si_rid;
        char                            si_ridtxt[8];
@@ -111,8 +112,7 @@ static int syncrepl_message_to_entry(
                                        Modifications **, Entry **, int );
 static int syncrepl_entry(
                                        syncinfo_t *, Operation*, Entry*,
-                                       Modifications**,int, struct berval*,
-                                       struct sync_cookie * );
+                                       Modifications**,int, struct berval* );
 static int syncrepl_updateCookie(
                                        syncinfo_t *, Operation *, struct berval *,
                                        struct sync_cookie * );
@@ -453,47 +453,15 @@ do_syncrep1(
        op->o_ssf = ( op->o_sasl_ssf > op->o_tls_ssf )
                ?  op->o_sasl_ssf : op->o_tls_ssf;
 
-
+       /* We've just started up, or the remote server hasn't sent us
+        * any meaningful state.
+        */
        if ( BER_BVISNULL( &si->si_syncCookie.octet_str ) ) {
                int i;
 
-               ldap_pvt_thread_mutex_lock( &si->si_cookieState->cs_mutex );
-               if ( !si->si_cookieState->cs_num ) {
-                       /* get contextCSN shadow replica from database */
-                       BerVarray csn = NULL;
-                       void *ctx = op->o_tmpmemctx;
-
-                       op->o_req_ndn = op->o_bd->be_nsuffix[0];
-                       op->o_req_dn = op->o_req_ndn;
-
-                       /* try to read stored contextCSN */
-                       op->o_tmpmemctx = NULL;
-                       backend_attribute( op, NULL, &op->o_req_ndn,
-                               slap_schema.si_ad_contextCSN, &csn, ACL_READ );
-                       op->o_tmpmemctx = ctx;
-                       if ( csn ) {
-                               si->si_cookieState->cs_vals = csn;
-                               for (i=0; !BER_BVISNULL( &csn[i] ); i++);
-                               si->si_cookieState->cs_num = i;
-                               si->si_cookieState->cs_sids = slap_parse_csn_sids( csn, i );
-                       }
-               }
-               if ( si->si_cookieState->cs_num ) {
-                       ber_bvarray_free( si->si_syncCookie.ctxcsn );
-                       if ( ber_bvarray_dup_x( &si->si_syncCookie.ctxcsn,
-                               si->si_cookieState->cs_vals, NULL )) {
-                               rc = LDAP_NO_MEMORY;
-                               goto done;
-                       }
-                       si->si_syncCookie.numcsns = si->si_cookieState->cs_num;
-                       si->si_syncCookie.sids = ch_malloc( si->si_cookieState->cs_num *
-                               sizeof(int) );
-                       for ( i=0; i<si->si_syncCookie.numcsns; i++ )
-                               si->si_syncCookie.sids[i] = si->si_cookieState->cs_sids[i];
-               }
-               ldap_pvt_thread_mutex_unlock( &si->si_cookieState->cs_mutex );
-
                si->si_syncCookie.rid = si->si_rid;
+               si->si_syncCookie.sid = SLAP_SINGLE_SHADOW( si->si_be ) ? -1 :
+                       slap_serverID;
 
                LDAP_STAILQ_FOREACH( sc, &slap_sync_cookie, sc_next ) {
                        if ( si->si_rid == sc->rid ) {
@@ -509,24 +477,109 @@ do_syncrep1(
 
                        /* ctxcsn wasn't parsed yet, do it now */
                        slap_parse_sync_cookie( sc, op->o_tmpmemctx );
-                       if ( !sc->ctxcsn ) {
-                               /* if cmdline cookie does not have ctxcsn */
-                               /* component, set it to an initial value */
-                               slap_init_sync_cookie_ctxcsn( sc );
-                       }
                        slap_sync_cookie_free( &si->si_syncCookie, 0 );
                        slap_dup_sync_cookie( &si->si_syncCookie, sc );
                        slap_sync_cookie_free( sc, 1 );
+               } else {
+                       ldap_pvt_thread_mutex_lock( &si->si_cookieState->cs_mutex );
+                       if ( !si->si_cookieState->cs_num ) {
+                               /* get contextCSN shadow replica from database */
+                               BerVarray csn = NULL;
+                               void *ctx = op->o_tmpmemctx;
+
+                               op->o_req_ndn = op->o_bd->be_nsuffix[0];
+                               op->o_req_dn = op->o_req_ndn;
+
+                               /* try to read stored contextCSN */
+                               op->o_tmpmemctx = NULL;
+                               backend_attribute( op, NULL, &op->o_req_ndn,
+                                       slap_schema.si_ad_contextCSN, &csn, ACL_READ );
+                               op->o_tmpmemctx = ctx;
+                               if ( csn ) {
+                                       si->si_cookieState->cs_vals = csn;
+                                       for (i=0; !BER_BVISNULL( &csn[i] ); i++);
+                                       si->si_cookieState->cs_num = i;
+                                       si->si_cookieState->cs_sids = slap_parse_csn_sids( csn, i );
+                               }
+                       }
+                       if ( si->si_cookieState->cs_num ) {
+                               ber_bvarray_free( si->si_syncCookie.ctxcsn );
+                               if ( ber_bvarray_dup_x( &si->si_syncCookie.ctxcsn,
+                                       si->si_cookieState->cs_vals, NULL )) {
+                                       rc = LDAP_NO_MEMORY;
+                                       goto done;
+                               }
+                               si->si_syncCookie.numcsns = si->si_cookieState->cs_num;
+                               si->si_syncCookie.sids = ch_malloc( si->si_cookieState->cs_num *
+                                       sizeof(int) );
+                               for ( i=0; i<si->si_syncCookie.numcsns; i++ )
+                                       si->si_syncCookie.sids[i] = si->si_cookieState->cs_sids[i];
+                       }
+                       ldap_pvt_thread_mutex_unlock( &si->si_cookieState->cs_mutex );
                }
 
                slap_compose_sync_cookie( NULL, &si->si_syncCookie.octet_str,
-                       si->si_syncCookie.ctxcsn, si->si_syncCookie.rid );
+                       si->si_syncCookie.ctxcsn, si->si_syncCookie.rid,
+                       si->si_syncCookie.sid );
        } else {
+               AttributeName at[2];
+               Attribute a = { slap_schema.si_ad_contextCSN };
+               Entry e = {0};
+               SlapReply rs = {0};
+               int i, j, changed = 0;
+
+               /* Look for contextCSN from syncprov overlay. If
+                * there's no overlay, this will be a no-op. That means
+                * this is a pure consumer, so local changes will not be
+                * allowed, and all changes will already be reflected in
+                * the cookieState.
+                */
+               e.e_attrs = &a;
+               e.e_name = si->si_wbe->be_suffix[0];
+               e.e_nname = si->si_wbe->be_nsuffix[0];
+               rs.sr_entry = &e;
+               rs.sr_flags = REP_ENTRY_MODIFIABLE;
+               at[0].an_name = a.a_desc->ad_cname;
+               at[0].an_desc = a.a_desc;
+               BER_BVZERO( &at[1].an_name );
+
                ldap_pvt_thread_mutex_lock( &si->si_cookieState->cs_mutex );
-               /* match SIDs */
+               rc = backend_operational( op, &rs );
+               if ( rc == LDAP_SUCCESS && a.a_vals ) {
+                       int num;
+                       for (i=0; !BER_BVISNULL( &a.a_vals[i] ); i++) ;
+                       num = i;
+                       /* check for differences */
+                       if ( num != si->si_cookieState->cs_num ) {
+                               changed = 1;
+                       } else {
+                               for ( i=0; i<num; i++ ) {
+                                       if ( ber_bvcmp( &a.a_vals[i],
+                                               &si->si_cookieState->cs_vals[i] )) {
+                                               changed =1;
+                                               break;
+                                       }
+                               }
+                       }
+                       if ( changed ) {
+                               ber_bvarray_free( si->si_cookieState->cs_vals );
+                               ch_free( si->si_cookieState->cs_sids );
+                               si->si_cookieState->cs_num = num;
+                               si->si_cookieState->cs_vals = a.a_vals;
+                               si->si_cookieState->cs_sids = slap_parse_csn_sids( a.a_vals,
+                                       num );
+                               si->si_cookieState->cs_age++;
+                       } else {
+                               ber_bvarray_free( a.a_vals );
+                       }
+                       changed = 0;
+               }
+               /* See if the cookieState has changed due to anything outside
+                * this particular consumer. That includes other consumers in
+                * the same context, or local changes detected above.
+                */
                if ( si->si_cookieState->cs_num > 1 && si->si_cookieAge !=
                        si->si_cookieState->cs_age ) {
-                       int i, j;
 
                        for (i=0; !BER_BVISNULL( &si->si_syncCookie.ctxcsn[i] ); i++) {
                                /* bogus, just dup everything */
@@ -534,17 +587,28 @@ do_syncrep1(
                                        ber_bvarray_free( si->si_syncCookie.ctxcsn );
                                        ber_bvarray_dup_x( &si->si_syncCookie.ctxcsn,
                                                si->si_cookieState->cs_vals, NULL );
+                                       changed = 1;
                                        break;
                                }
                                for (j=0; j<si->si_cookieState->cs_num; j++) {
                                        if ( si->si_syncCookie.sids[i] !=
                                                si->si_cookieState->cs_sids[j] )
                                                continue;
+                                       if ( bvmatch( &si->si_syncCookie.ctxcsn[i],
+                                               &si->si_cookieState->cs_vals[j] ))
+                                               break;
                                        ber_bvreplace( &si->si_syncCookie.ctxcsn[i],
                                                &si->si_cookieState->cs_vals[j] );
+                                       changed = 1;
                                        break;
                                }
                        }
+                       if ( changed ) {
+                               ch_free( si->si_syncCookie.octet_str.bv_val );
+                               slap_compose_sync_cookie( NULL, &si->si_syncCookie.octet_str,
+                                       si->si_syncCookie.ctxcsn, si->si_syncCookie.rid,
+                                       SLAP_SINGLE_SHADOW( si->si_be ) ? -1 : slap_serverID );
+                       }
                }
                ldap_pvt_thread_mutex_unlock( &si->si_cookieState->cs_mutex );
        }
@@ -576,6 +640,11 @@ compare_csns( struct sync_cookie *sc1, struct sync_cookie *sc2, int *which )
 
        *which = 0;
 
+       if ( sc1->numcsns < sc2->numcsns ) {
+               *which = sc1->numcsns;
+               return -1;
+       }
+
        for (i=0; !BER_BVISNULL( &sc1->ctxcsn[i] ); i++) {
                for (j=0; !BER_BVISNULL( &sc2->ctxcsn[j] ); j++) {
                        if ( sc1->sids[i] != sc2->sids[j] )
@@ -722,7 +791,7 @@ do_syncrep2(
                                        &modlist, &entry, syncstate ) ) == LDAP_SUCCESS )
                                {
                                        if ( ( rc = syncrepl_entry( si, op, entry, &modlist,
-                                               syncstate, &syncUUID, &syncCookie_req ) ) == LDAP_SUCCESS &&
+                                               syncstate, &syncUUID ) ) == LDAP_SUCCESS &&
                                                syncCookie.ctxcsn )
                                        {
                                                rc = syncrepl_updateCookie( si, op, psub, &syncCookie );
@@ -785,6 +854,7 @@ do_syncrep2(
                                }
                                if ( !syncCookie_req.ctxcsn ) {
                                        match = -1;
+                                       m = 0;
                                } else if ( !syncCookie.ctxcsn ) {
                                        match = 1;
                                } else {
@@ -931,6 +1001,7 @@ do_syncrep2(
 
                                        if ( !syncCookie_req.ctxcsn ) {
                                                match = -1;
+                                               m = 0;
                                        } else if ( !syncCookie.ctxcsn ) {
                                                match = 1;
                                        } else {
@@ -1069,6 +1140,15 @@ do_syncrepl(
        if ( !si->si_schemachecking )
                op->o_no_schema_check = 1;
 
+       /* If we're glued, send writes through the glue parent */
+       if ( !si->si_wbe ) {
+               if ( SLAP_GLUE_SUBORDINATE( be )) {
+                       si->si_wbe = select_backend( &be->be_nsuffix[0], 0, 1 );
+               } else {
+                       si->si_wbe = be;
+               }
+       }
+
        /* Establish session, do search */
        if ( !si->si_ld ) {
                si->si_refreshDelete = 0;
@@ -1087,6 +1167,13 @@ reload:
                        goto reload;
                }
 
+               /* We got deleted while running on cn=config */
+               if ( !si->si_ctype ) {
+                       if ( si->si_conn_setup )
+                               dostop = 1;
+                       rc = -1;
+               }
+
                if ( abs(si->si_type) == LDAP_SYNC_REFRESH_AND_PERSIST ) {
                        /* If we succeeded, enable the connection for further listening.
                         * If we failed, tear down the connection and reschedule.
@@ -1141,7 +1228,8 @@ reload:
                                break;
                }
 
-               if ( !si->si_retrynum || si->si_retrynum[i] == RETRYNUM_TAIL ) {
+               if ( !si->si_ctype
+                       || !si->si_retrynum || si->si_retrynum[i] == RETRYNUM_TAIL ) {
                        ldap_pvt_runqueue_remove( &slapd_rq, rtask );
                } else if ( RETRYNUM_VALID( si->si_retrynum[i] ) ) {
                        if ( si->si_retrynum[i] > 0 )
@@ -1155,6 +1243,24 @@ reload:
        ldap_pvt_thread_mutex_unlock( &slapd_rq.rq_mutex );
        ldap_pvt_thread_mutex_unlock( &si->si_mutex );
 
+       /* Do final delete cleanup */
+       if ( !si->si_ctype ) {
+               cookie_state *cs = NULL;
+               syncinfo_t **sip;
+
+               cs = be->be_syncinfo->si_cookieState;
+               for ( sip = &be->be_syncinfo; *sip != si; sip = &(*sip)->si_next );
+               *sip = si->si_next;
+               syncinfo_free( si );
+               if ( !be->be_syncinfo ) {
+                       SLAP_DBFLAGS( be ) &= ~(SLAP_DBFLAG_SHADOW|SLAP_DBFLAG_SYNC_SHADOW);
+                       if ( cs ) {
+                               ber_bvarray_free( cs->cs_vals );
+                               ldap_pvt_thread_mutex_destroy( &cs->cs_mutex );
+                               ch_free( cs );
+                       }
+               }
+       }
        return NULL;
 }
 
@@ -1296,6 +1402,7 @@ syncrepl_message_to_op(
        }
 
        op->o_tag = LBER_DEFAULT;
+       op->o_bd = si->si_wbe;
 
        while (( rc = ldap_get_attribute_ber( si->si_ld, msg, ber, &bv, &bvals ) )
                == LDAP_SUCCESS ) {
@@ -1389,10 +1496,12 @@ syncrepl_message_to_op(
                                be_entry_release_w( op, op->ora_e );
                } else {
                        op->orm_modlist = modlist;
+                       op->o_bd = si->si_wbe;
                        rc = op->o_bd->be_modify( op, &rs );
                        Debug( rc ? LDAP_DEBUG_ANY : LDAP_DEBUG_SYNC,
                                "syncrepl_message_to_op: %s be_modify %s (%d)\n", 
                                si->si_ridtxt, op->o_req_dn.bv_val, rc );
+                       op->o_bd = si->si_be;
                }
                break;
        case LDAP_REQ_MODRDN:
@@ -1446,6 +1555,7 @@ syncrepl_message_to_op(
        }
 done:
        slap_graduate_commit_csn( op );
+       op->o_bd = si->si_be;
        op->o_tmpfree( op->o_csn.bv_val, op->o_tmpmemctx );
        BER_BVZERO( &op->o_csn );
        if ( modlist ) {
@@ -1667,8 +1777,7 @@ syncrepl_entry(
        Entry* entry,
        Modifications** modlist,
        int syncstate,
-       struct berval* syncUUID,
-       struct sync_cookie* syncCookie_req )
+       struct berval* syncUUID )
 {
        Backend *be = op->o_bd;
        slap_callback   cb = { NULL, NULL, NULL, NULL };
@@ -1848,8 +1957,9 @@ retry_add:;
                        op->o_req_ndn = entry->e_nname;
                        op->o_tag = LDAP_REQ_ADD;
                        op->ora_e = entry;
+                       op->o_bd = si->si_wbe;
 
-                       rc = be->be_add( op, &rs_add );
+                       rc = op->o_bd->be_add( op, &rs_add );
                        Debug( LDAP_DEBUG_SYNC,
                                        "syncrepl_entry: %s be_add (%d)\n", 
                                        si->si_ridtxt, rc, 0 );
@@ -1882,6 +1992,7 @@ retry_add:;
                                        SlapReply       rs2 = { 0 };
                                        slap_callback   cb2 = { 0 };
 
+                                       op2.o_bd = be;
                                        op2.o_tag = LDAP_REQ_SEARCH;
                                        op2.o_req_dn = entry->e_name;
                                        op2.o_req_ndn = entry->e_nname;
@@ -1917,6 +2028,7 @@ retry_add:;
                                        si->si_ridtxt, rs_add.sr_err, 0 );
                                break;
                        }
+                       op->o_bd = be;
                        goto done;
                }
                /* FALLTHRU */
@@ -1983,7 +2095,8 @@ retry_add:;
                                        }
                                }
                        }
-                       rc = be->be_modrdn( op, &rs_modify );
+                       op->o_bd = si->si_wbe;
+                       rc = op->o_bd->be_modrdn( op, &rs_modify );
                        op->o_tmpfree( op->orr_nnewrdn.bv_val, op->o_tmpmemctx );
                        op->o_tmpfree( op->orr_newrdn.bv_val, op->o_tmpmemctx );
 
@@ -1991,14 +2104,16 @@ retry_add:;
                        Debug( LDAP_DEBUG_SYNC,
                                        "syncrepl_entry: %s be_modrdn (%d)\n", 
                                        si->si_ridtxt, rc, 0 );
+                       op->o_bd = be;
                        goto done;
                }
                if ( dni.mods ) {
                        op->o_tag = LDAP_REQ_MODIFY;
                        op->orm_modlist = dni.mods;
                        op->orm_no_opattrs = 1;
+                       op->o_bd = si->si_wbe;
 
-                       rc = be->be_modify( op, &rs_modify );
+                       rc = op->o_bd->be_modify( op, &rs_modify );
                        slap_mods_free( op->orm_modlist, 1 );
                        Debug( LDAP_DEBUG_SYNC,
                                        "syncrepl_entry: %s be_modify (%d)\n", 
@@ -2008,6 +2123,7 @@ retry_add:;
                                        "syncrepl_entry: %s be_modify failed (%d)\n",
                                        si->si_ridtxt, rs_modify.sr_err, 0 );
                        }
+                       op->o_bd = be;
                } else {
                        Debug( LDAP_DEBUG_SYNC,
                                        "syncrepl_entry: %s entry unchanged, ignored (%s)\n", 
@@ -2019,7 +2135,8 @@ retry_add:;
                        op->o_req_dn = dni.dn;
                        op->o_req_ndn = dni.ndn;
                        op->o_tag = LDAP_REQ_DELETE;
-                       rc = be->be_delete( op, &rs_delete );
+                       op->o_bd = si->si_wbe;
+                       rc = op->o_bd->be_delete( op, &rs_delete );
                        Debug( LDAP_DEBUG_SYNC,
                                        "syncrepl_entry: %s be_delete (%d)\n", 
                                        si->si_ridtxt, rc, 0 );
@@ -2027,7 +2144,7 @@ retry_add:;
                        while ( rs_delete.sr_err == LDAP_SUCCESS
                                && op->o_delete_glue_parent ) {
                                op->o_delete_glue_parent = 0;
-                               if ( !be_issuffix( op->o_bd, &op->o_req_ndn ) ) {
+                               if ( !be_issuffix( be, &op->o_req_ndn ) ) {
                                        slap_callback cb = { NULL };
                                        cb.sc_response = slap_null_cb;
                                        dnParent( &op->o_req_ndn, &pdn );
@@ -2039,6 +2156,7 @@ retry_add:;
                                        break;
                                }
                        }
+                       op->o_bd = be;
                }
                goto done;
 
@@ -2164,6 +2282,7 @@ syncrepl_del_nonpresent(
                        csn = si->si_syncCookie.ctxcsn[0];
                }
 
+               op->o_bd = si->si_wbe;
                slap_queue_csn( op, &csn );
 
                np_list = LDAP_LIST_FIRST( &si->si_nonpresentlist );
@@ -2203,14 +2322,14 @@ syncrepl_del_nonpresent(
                                op->o_tag = LDAP_REQ_MODIFY;
                                op->orm_modlist = &mod1;
 
-                               rc = be->be_modify( op, &rs_modify );
+                               rc = op->o_bd->be_modify( op, &rs_modify );
                                if ( mod2.sml_next ) slap_mods_free( mod2.sml_next, 1 );
                        }
 
                        while ( rs_delete.sr_err == LDAP_SUCCESS &&
                                        op->o_delete_glue_parent ) {
                                op->o_delete_glue_parent = 0;
-                               if ( !be_issuffix( op->o_bd, &op->o_req_ndn ) ) {
+                               if ( !be_issuffix( be, &op->o_req_ndn ) ) {
                                        slap_callback cb = { NULL };
                                        cb.sc_response = slap_null_cb;
                                        dnParent( &op->o_req_ndn, &pdn );
@@ -2232,6 +2351,7 @@ syncrepl_del_nonpresent(
                }
 
                slap_graduate_commit_csn( op );
+               op->o_bd = be;
 
                op->o_tmpfree( op->o_csn.bv_val, op->o_tmpmemctx );
                BER_BVZERO( &op->o_csn );
@@ -2442,6 +2562,7 @@ syncrepl_updateCookie(
                                first = syncCookie->ctxcsn[i];
                }
        }
+       op->o_bd = si->si_wbe;
        slap_queue_csn( op, &first );
 
        op->o_tag = LDAP_REQ_MODIFY;
@@ -2462,7 +2583,7 @@ syncrepl_updateCookie(
                op->orm_modlist = &mod[1];
 
        op->orm_no_opattrs = 1;
-       rc = be->be_modify( op, &rs_modify );
+       rc = op->o_bd->be_modify( op, &rs_modify );
        op->o_msgid = 0;
 
        if ( rs_modify.sr_err == LDAP_SUCCESS ) {
@@ -2499,6 +2620,7 @@ syncrepl_updateCookie(
        ldap_pvt_thread_mutex_unlock( &si->si_cookieState->cs_mutex );
 
        slap_graduate_commit_csn( op );
+       op->o_bd = be;
        op->o_tmpfree( op->o_csn.bv_val, op->o_tmpmemctx );
        BER_BVZERO( &op->o_csn );
        if ( mod[1].sml_next ) slap_mods_free( mod[1].sml_next, 1 );
@@ -2706,6 +2828,12 @@ dn_callback(
                                        slap_schema.si_ad_entryCSN );
                                if ( new && old && ber_bvcmp( &old->a_vals[0],
                                        &new->a_vals[0] ) >= 0 ) {
+                                       Debug( LDAP_DEBUG_SYNC,
+                                               "dn_callback : new entry is older than ours "
+                                               "%s ours %s, new %s\n",
+                                               rs->sr_entry->e_name.bv_val,
+                                               old->a_vals[0].bv_val,
+                                               new->a_vals[0].bv_val );
                                        return LDAP_SUCCESS;
                                }
 
@@ -3060,22 +3188,13 @@ syncinfo_free( syncinfo_t *sie )
 #define SLIMITSTR              "sizelimit"
 #define TLIMITSTR              "timelimit"
 #define SYNCDATASTR            "syncdata"
+#define LOGBASESTR             "logbase"
+#define LOGFILTERSTR   "logfilter"
 
 /* FIXME: undocumented */
-#define        LOGBASESTR      "logbase"
-#define LOGFILTERSTR   "logfilter"
-#define OLDAUTHCSTR            "bindprincipal"
 #define EXATTRSSTR             "exattrs"
 #define MANAGEDSAITSTR         "manageDSAit"
 
-/* FIXME: unused */
-#define LASTMODSTR             "lastmod"
-#define LMGENSTR               "gen"
-#define LMNOSTR                        "no"
-#define LMREQSTR               "req"
-#define SRVTABSTR              "srvtab"
-#define SUFFIXSTR              "suffix"
-
 /* mandatory */
 #define GOT_ID                 0x0001
 #define GOT_PROVIDER   0x0002
@@ -3840,7 +3959,18 @@ syncrepl_config( ConfigArgs *c )
                                si = *sip;
                                if ( c->valx == -1 || i == c->valx ) {
                                        *sip = si->si_next;
-                                       syncinfo_free( si );
+                                       /* If the task is currently active, we have to leave
+                                        * it running. It will exit on its own. This will only
+                                        * happen when running on the cn=config DB.
+                                        */
+                                       if ( si->si_re &&
+                                               ldap_pvt_runqueue_isrunning( &slapd_rq, si->si_re ) ) {
+                                               si->si_ctype = 0;
+                                       } else {
+                                               syncinfo_free( si );
+                                       }
+                                       if ( i == c->valx )
+                                               break;
                                } else {
                                        sip = &si->si_next;
                                }