objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 19
olmCompletedOps: 19
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 20
olmCompletedOps: 20
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 2
olmCompletedOps: 2
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT2@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 5
olmCompletedOps: 5
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: regular
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 1
olmCompletedOps: 1
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
objectClass: olmBalancerConnection
olmConnectionType: bind
olmConnectionState: ready
+olmConnectionLocalAddress: IP=localhost:port
+olmConnectionPeerAddress: IP=localhost:@PORT3@
olmPendingOps: 0
olmReceivedOps: 0
olmCompletedOps: 0
--- /dev/null
+#! /bin/sh
+# $OpenLDAP$
+## This work is part of OpenLDAP Software <http://www.openldap.org/>.
+##
+## Copyright 1998-2022 The OpenLDAP Foundation.
+## All rights reserved.
+##
+## Redistribution and use in source and binary forms, with or without
+## modification, are permitted only as authorized by the OpenLDAP
+## Public License.
+##
+## A copy of this license is available in the file LICENSE in the
+## top-level directory of the distribution or, alternatively, at
+## <http://www.OpenLDAP.org/license.html>.
+
+echo "running defines.sh"
+. $SRCDIR/scripts/defines.sh
+
+if test $SYNCPROV = syncprovno; then
+ echo "Syncrepl provider overlay not available, test skipped"
+ exit 0
+fi
+
+ITS=9288
+
+CFPRO=$TESTDIR/cfpro.d
+CFCON=$TESTDIR/cfcon.d
+
+mkdir -p $TESTDIR $DBDIR1A $DBDIR1B $DBDIR2A $CFPRO $CFCON
+
+$SLAPPASSWD -g -n >$CONFIGPWF
+
+if test x"$SYNCMODE" = x ; then
+ SYNCMODE=ro
+fi
+case "$SYNCMODE" in
+ ro)
+ SYNCTYPE="type=refreshOnly interval=00:00:00:03"
+ ;;
+ rp)
+ SYNCTYPE="type=refreshAndPersist"
+ ;;
+ *)
+ echo "unknown sync mode $SYNCMODE"
+ exit 1;
+ ;;
+esac
+
+#
+# Test replication of dynamic config with alternate consumer config:
+# - start provider
+# - start consumer
+# - configure over ldap
+# - populate over ldap
+# - configure syncrepl over ldap
+# - retrieve database over ldap and compare against expected results
+#
+
+echo "Starting provider slapd on TCP/IP port $PORT1..."
+. $CONFFILTER $BACKEND < $DYNAMICCONF > $CONFLDIF
+$SLAPADD -F $CFPRO -n 0 -l $CONFLDIF
+$SLAPD -F $CFPRO -h $URI1 -d $LVL > $LOG1 2>&1 &
+PROVIDERPID=$!
+if test $WAIT != 0 ; then
+ echo PROVIDERPID $PROVIDERPID
+ read foo
+fi
+KILLPIDS="$PROVIDERPID"
+
+sleep 1
+
+echo "Using ldapsearch to check that provider slapd is running..."
+for i in 0 1 2 3 4 5; do
+ $LDAPSEARCH -s base -b "" -H $URI1 \
+ 'objectclass=*' > /dev/null 2>&1
+ RC=$?
+ if test $RC = 0 ; then
+ break
+ fi
+ echo "Waiting 5 seconds for slapd to start..."
+ sleep 5
+done
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Inserting syncprov overlay on provider..."
+if [ "$SYNCPROV" = syncprovmod ]; then
+ $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF > $TESTOUT 2>&1
+dn: cn=module,cn=config
+objectClass: olcModuleList
+cn: module
+olcModulePath: ../servers/slapd/overlays
+olcModuleLoad: syncprov.la
+EOF
+ RC=$?
+ if test $RC != 0 ; then
+ echo "ldapadd failed for moduleLoad ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+ fi
+fi
+read CONFIGPW < $CONFIGPWF
+$LDAPMODIFY -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >> $TESTOUT 2>&1
+dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcSyncProvConfig
+olcOverlay: syncprov
+EOF
+RC=$?
+if test $RC != 0 ; then
+ echo "ldapmodify failed for syncprov config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+# Consumers will not replicate the provider's actual cn=config.
+# Instead, they will use an alternate DB so that they may be
+# configured differently from the provider. This alternate DB
+# will also be a consumer for the real cn=schema,cn=config tree.
+# It has multi-provider enabled so that it can be written directly
+# while being a consumer of the main schema.
+echo "Configuring consumer config DB on provider..."
+$LDAPMODIFY -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >> $TESTOUT 2>&1
+dn: cn=config
+changetype: modify
+add: olcServerID
+olcServerID: 1
+
+dn: olcDatabase={1}ldif,cn=config
+changetype: add
+objectClass: olcDatabaseConfig
+objectClass: olcLdifConfig
+olcDatabase: {1}ldif
+olcDbDirectory: $DBDIR1A
+olcSuffix: cn=config,cn=consumer
+olcRootDN: cn=config,cn=consumer
+olcRootPW: repsecret
+olcAccess: to * by dn.base="cn=config" write
+
+dn: olcOverlay=syncprov,olcDatabase={1}ldif,cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcSyncProvConfig
+olcOverlay: syncprov
+
+dn: cn=config,cn=consumer
+changetype: add
+objectClass: olcGlobal
+cn: config
+
+dn: olcDatabase={0}config,cn=config,cn=consumer
+changetype: add
+objectClass: olcDatabaseConfig
+olcDatabase: {0}config
+olcRootPW: topsecret
+olcSyncrepl: {0}rid=001 provider=$URI1 binddn="cn=config,cn=consumer"
+ bindmethod=simple credentials=repsecret searchbase="cn=config,cn=consumer"
+ $SYNCTYPE retry="3 +" timeout=3 suffixmassage="cn=config"
+olcUpdateRef: $URI1
+
+dn: olcDatabase={1}ldif,cn=config
+changetype: modify
+add: olcSyncrepl
+olcSyncrepl: {0}rid=001 provider=$URI1 binddn="cn=config"
+ bindmethod=simple credentials=$CONFIGPW searchbase="cn=schema,cn=config"
+ $SYNCTYPE retry="3 +" timeout=3
+ suffixmassage="cn=schema,cn=config,cn=consumer"
+-
+add: olcMultiProvider
+olcMultiProvider: TRUE
+
+EOF
+RC=$?
+if test $RC != 0 ; then
+ echo "ldapmodify failed for consumer DB config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Starting consumer slapd on TCP/IP port $PORT2..."
+$SLAPADD -F $CFCON -n 0 -l $CONFLDIF
+$SLAPD -F $CFCON -h $URI2 -d $LVL > $LOG2 2>&1 &
+CONSUMERPID=$!
+if test $WAIT != 0 ; then
+ echo CONSUMERPID $CONSUMERPID
+ read foo
+fi
+KILLPIDS="$KILLPIDS $CONSUMERPID"
+
+sleep 1
+
+echo "Using ldapsearch to check that consumer slapd is running..."
+for i in 0 1 2 3 4 5; do
+ $LDAPSEARCH -s base -b "" -H $URI2 \
+ 'objectclass=*' > /dev/null 2>&1
+ RC=$?
+ if test $RC = 0 ; then
+ break
+ fi
+ echo "Waiting 5 seconds for slapd to start..."
+ sleep 5
+done
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Configuring syncrepl on consumer..."
+$LDAPMODIFY -D cn=config -H $URI2 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1
+dn: olcDatabase={0}config,cn=config
+changetype: modify
+add: olcSyncRepl
+olcSyncRepl: rid=001 provider=$URI1 binddn="cn=config,cn=consumer"
+ bindmethod=simple credentials=repsecret searchbase="cn=config,cn=consumer"
+ $SYNCTYPE retry="3 +" timeout=3
+ suffixmassage="cn=config"
+-
+add: olcUpdateRef
+olcUpdateRef: $URI1
+EOF
+
+sleep 1
+
+echo "Using ldapsearch to check that syncrepl received config changes..."
+RC=32
+for i in 0 1 2 3 4 5; do
+ RESULT=`$LDAPSEARCH -H $URI2 -D cn=config -y $CONFIGPWF \
+ -s base -b "olcDatabase={0}config,cn=config" \
+ '(olcUpdateRef=*)' 2>&1 | awk '/^dn:/ {print "OK"}'`
+ if test "x$RESULT" = "xOK" ; then
+ RC=0
+ break
+ fi
+ echo "Waiting $SLEEP1 seconds for syncrepl to receive changes..."
+ sleep $SLEEP1
+done
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Adding schema and databases on provider..."
+$LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1
+include: file://$ABS_SCHEMADIR/core.ldif
+
+include: file://$ABS_SCHEMADIR/cosine.ldif
+
+include: file://$ABS_SCHEMADIR/inetorgperson.ldif
+
+include: file://$ABS_SCHEMADIR/openldap.ldif
+
+include: file://$ABS_SCHEMADIR/nis.ldif
+EOF
+RC=$?
+if test $RC != 0 ; then
+ echo "ldapadd failed for schema config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Using ldapsearch to check that syncrepl received the schema changes..."
+RC=32
+for i in 0 1 2 3 4 5; do
+ RESULT=`$LDAPSEARCH -H $URI2 -D cn=config -y $CONFIGPWF \
+ -s sub -b "cn=schema,cn=config" \
+ '(cn=*openldap)' 2>&1 | awk '/^dn:/ {print "OK"}'`
+ if test "x$RESULT" = "xOK" ; then
+ RC=0
+ break
+ fi
+ echo "Waiting $SLEEP1 seconds for syncrepl to receive changes..."
+ sleep $SLEEP1
+done
+
+nullExclude="" nullOK=""
+test $BACKEND = null && nullExclude="# " nullOK="OK"
+
+if [ "$BACKENDTYPE" = mod ]; then
+ $LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1
+dn: cn=module,cn=config
+objectClass: olcModuleList
+cn: module
+olcModulePath: ../servers/slapd/back-$BACKEND
+olcModuleLoad: back_$BACKEND.la
+
+dn: cn=module,cn=config,cn=consumer
+objectClass: olcModuleList
+cn: module
+olcModulePath: ../servers/slapd/back-$BACKEND
+olcModuleLoad: back_$BACKEND.la
+EOF
+ RC=$?
+ if test $RC != 0 ; then
+ echo "ldapadd failed for backend config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+ fi
+fi
+
+$LDAPADD -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1
+dn: olcDatabase={2}$BACKEND,cn=config
+objectClass: olcDatabaseConfig
+${nullExclude}objectClass: olc${BACKEND}Config
+olcDatabase: {2}$BACKEND
+olcSuffix: $BASEDN
+${nullExclude}olcDbDirectory: $DBDIR1B
+olcRootDN: $MANAGERDN
+olcRootPW: $PASSWD
+olcSyncRepl: rid=002 provider=$URI1 binddn="$MANAGERDN" bindmethod=simple
+ credentials=$PASSWD searchbase="$BASEDN" $SYNCTYPE
+ retry="3 +" timeout=3
+olcUpdateRef: $URI1
+
+dn: olcOverlay=syncprov,olcDatabase={2}${BACKEND},cn=config
+changetype: add
+objectClass: olcOverlayConfig
+objectClass: olcSyncProvConfig
+olcOverlay: syncprov
+
+dn: olcDatabase={1}$BACKEND,cn=config,cn=consumer
+objectClass: olcDatabaseConfig
+${nullExclude}objectClass: olc${BACKEND}Config
+olcDatabase: {1}$BACKEND
+olcSuffix: $BASEDN
+${nullExclude}olcDbDirectory: $DBDIR2A
+olcRootDN: $MANAGERDN
+olcRootPW: $PASSWD
+olcSyncRepl: rid=002 provider=$URI1 binddn="$MANAGERDN" bindmethod=simple
+ credentials=$PASSWD searchbase="$BASEDN" $SYNCTYPE
+ retry="3 +" timeout=3
+olcUpdateRef: $URI1
+
+EOF
+RC=$?
+if test $RC != 0 ; then
+ echo "ldapadd failed for database config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+if test $INDEXDB = indexdb ; then
+ $LDAPMODIFY -D cn=config -H $URI1 -y $CONFIGPWF <<EOF >>$TESTOUT 2>&1
+dn: olcDatabase={2}$BACKEND,cn=config
+changetype: modify
+add: olcDbIndex
+olcDbIndex: objectClass,entryUUID,entryCSN eq
+olcDbIndex: cn,uid pres,eq,sub
+EOF
+ RC=$?
+ if test $RC != 0 ; then
+ echo "ldapadd modify for database config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+ fi
+fi
+
+echo "Using ldapadd to populate provider..."
+$LDAPADD -D "$MANAGERDN" -H $URI1 -w $PASSWD -f $LDIFORDERED \
+ >> $TESTOUT 2>&1
+RC=$?
+if test $RC != 0 ; then
+ echo "ldapadd failed for database config ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Waiting $SLEEP1 seconds for syncrepl to receive changes..."
+sleep $SLEEP1
+
+echo "Using ldapsearch to check that syncrepl received database changes..."
+RC=32
+for i in 0 1 2 3 4 5; do
+ RESULT=`$LDAPSEARCH -H $URI2 \
+ -s base -b "cn=Ursula Hampster,ou=Alumni Association,ou=People,dc=example,dc=com" \
+ '(objectClass=*)' 2>&1 | awk '/^dn:/ {print "OK"}'`
+ if test "x$RESULT$nullOK" = "xOK" ; then
+ RC=0
+ break
+ fi
+ echo "Waiting $SLEEP1 seconds for syncrepl to receive changes..."
+ sleep $SLEEP1
+done
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Using ldapsearch to read all the entries from the provider..."
+$LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI1 -w $PASSWD \
+ 'objectclass=*' > $PROVIDEROUT 2>&1
+RC=$?
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed at provider ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Using ldapsearch to read all the entries from the consumer..."
+$LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI2 -w $PASSWD \
+ 'objectclass=*' > $CONSUMEROUT 2>&1
+RC=$?
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed at consumer ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Filtering provider results..."
+$LDIFFILTER < $PROVIDEROUT > $PROVIDERFLT
+echo "Filtering consumer results..."
+$LDIFFILTER < $CONSUMEROUT > $CONSUMERFLT
+
+echo "Comparing retrieved entries from provider and consumer..."
+$CMP $PROVIDERFLT $CONSUMERFLT > $CMPOUT
+
+if test $? != 0 ; then
+ echo "test failed - provider and consumer databases differ"
+ exit 1
+fi
+
+echo "Stopping provider and consumer"
+
+kill -HUP $KILLPIDS
+
+sleep 3
+
+echo "Exporting config database for consumer from provider"
+$SLAPCAT -o ldif-wrap=no -F testrun/cfpro.d -b "cn=config,cn=consumer" -l testrun/config-consumer.ldif
+echo "Rewriting config database for loading on consumer"
+cp testrun/config-consumer.ldif testrun/consumer.ldif
+sed -i -e "s/^dn:\(.*\),cn=consumer/dn:\1/" testrun/consumer.ldif
+mv $CFCON $CFCON.orig
+mkdir -p $CFCON
+echo "Reloading config database on consumer"
+$SLAPADD -F $CFCON -n 0 -l testrun/consumer.ldif
+
+echo "Restarting consumer slapd on TCP/IP port $PORT2..."
+$SLAPD -F $CFCON -h $URI2 -d $LVL >> $LOG2 2>&1 &
+CONSUMERPID=$!
+if test $WAIT != 0 ; then
+ echo CONSUMERPID $CONSUMERPID
+ read foo
+fi
+KILLPIDS="$CONSUMERPID"
+
+sleep 1
+
+echo "Using ldapsearch to check that consumer slapd is running..."
+for i in 0 1 2 3 4 5; do
+ $LDAPSEARCH -s base -b "" -H $URI2 \
+ 'objectclass=*' > /dev/null 2>&1
+ RC=$?
+ if test $RC = 0 ; then
+ break
+ fi
+ echo "Waiting 5 seconds for slapd to start..."
+ sleep 5
+done
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+echo "Updating timestamps on provider version of consumer config database"
+timestamp=`date --utc +"%Y%m%d%H%M%S.%6NZ"`
+
+newcsn="${timestamp}#000000#001#000000"
+
+sed -i -e "s/entryCSN:.*/entryCSN: $newcsn/" testrun/config-consumer.ldif
+sed -i -e 's/contextCSN: .*#001#.*/contextCSN: 20230724180831.311873Z#000000#001#000000/' testrun/config-consumer.ldif
+
+mv testrun/db.1.a testrun/db.1.a.orig
+mkdir -p testrun/db.1.a
+
+$SLAPADD -F $CFPRO -b "cn=config,cn=consumer" -l testrun/config-consumer.ldif
+
+echo "Restarting provider slapd on TCP/IP port $PORT1..."
+$SLAPD -F $CFPRO -h $URI1 -d $LVL >> $LOG1 2>&1 &
+PROVIDERPID=$!
+if test $WAIT != 0 ; then
+ echo PROVIDERPID $PROVIDERPID
+ read foo
+fi
+KILLPIDS="$KILLPIDS $PROVIDERPID"
+
+echo "Waiting for consumer to refresh..."
+sleep 7
+
+echo "Checking contextCSN values for replicated cn=config..."
+
+CSN_ERRORS=0
+CSN1=`$LDAPSEARCH -x -D "cn=config,cn=consumer" -w "repsecret" -H $URI1 -b "cn=config,cn=consumer" -s base contextCSN | grep contextCSN | sort`
+CSN2=`$LDAPSEARCH -x -D "cn=config" -w "topsecret" -H $URI2 -b "cn=config" -s base contextCSN | grep contextCSN | sort`
+
+if test -z "$CSN1" ; then
+ echo "ERROR: contextCSN missing on the provider version of the consumer config"
+ exit 1
+fi
+
+if test -z "$CSN2" ; then
+ echo "ERROR: contextCSN missing on the consumer config database"
+ exit 1
+fi
+
+nCSN=`echo "$CSN1" | wc -l`
+if test "$nCSN" -ne 2 ; then
+ echo "ERROR: Wrong contextCSN count on provider, should be 2"
+ exit 1
+fi
+
+nCSN=`echo "$CSN2" | wc -l`
+if test "$nCSN" -ne 2 ; then
+ echo "ERROR: Wrong contextCSN count on consumer, should be 2"
+ exit 1
+fi
+if test -z "$CSN2" -o "$CSN1" != "$CSN2" ; then
+ echo "ERROR: contextCSN mismatch between provider and consumer"
+ echo "contextCSN on provider:"
+ echo "$CSN1"
+ echo "contextCSN on consumer:"
+ echo "$CSN2"
+ exit 1
+fi
+
+echo "Using ldapsearch to read all the entries from the consumer..."
+$LDAPSEARCH -S "" -b "$BASEDN" -D "$MANAGERDN" -H $URI2 -w $PASSWD \
+ 'objectclass=*' > $CONSUMEROUT 2>&1
+RC=$?
+
+if test $RC != 0 ; then
+ echo "ldapsearch failed at consumer ($RC)!"
+ test $KILLSERVERS != no && kill -HUP $KILLPIDS
+ exit $RC
+fi
+
+test $KILLSERVERS != no && kill -HUP $KILLPIDS
+
+echo "Filtering provider results..."
+$LDIFFILTER < $PROVIDEROUT > $PROVIDERFLT
+echo "Filtering consumer results..."
+$LDIFFILTER < $CONSUMEROUT > $CONSUMERFLT
+
+echo "Comparing retrieved entries from provider and consumer..."
+$CMP $PROVIDERFLT $CONSUMERFLT > $CMPOUT
+
+if test $? != 0 ; then
+ echo "test failed - provider and consumer databases differ"
+ exit 1
+fi
+
+echo ">>>>> Test succeeded"
+
+test $KILLSERVERS != no && wait
+
+exit 0