[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: top-level data entries not replicating, 2.4.15, now 2.4.17



I compiled new rpms and upgraded to 2.4.17 on both the provider and consumer.  The problem persists.


New entries like:
   dn:cn=test2,dc=srg,dc=com
   objectclass: top
   objectclass: person
   userpassword:blah
   sn:test2

don't replicate.  But other entries do, like:
   dn: uid=user1,ou=People,dc=srg,dc=com
   uid: user1
   cn: Advanced Open Systems
   objectClass: account
   objectClass: posixAccount
   objectClass: top
   objectClass: shadowAccount
   userPassword:: 
   shadowLastChange: 14441
   shadowMax: 99999
   shadowWarning: 7
   loginShell: /bin/bash
   uidNumber: 5000
   gidNumber: 5000
   homeDirectory: /home/user1
   gecos: Advanced Open Systems



I've attached the slapd.conf for the master/provider.


Thank you in advance for any assistance.






--- On Thu, 8/20/09, Brian Neu <proclivity76@yahoo.com> wrote:

> From: Brian Neu <proclivity76@yahoo.com>
> Subject: Re: top-level data entries not replicating, 2.4.15
> To: "Jonathan Clarke" <jonathan@phillipoux.net>
> Cc: openldap-technical@openldap.org
> Date: Thursday, August 20, 2009, 8:39 AM
> Forgive me if pasting here is bad
> etiquette.  
> 
> 
> <consumer slapd.conf>
> 
> include     
>    /etc/openldap/schema/corba.schema
> include     
>    /etc/openldap/schema/core.schema
> include     
>    /etc/openldap/schema/cosine.schema
> include     
>    /etc/openldap/schema/duaconf.schema
> include     
>    /etc/openldap/schema/dyngroup.schema
> include     
>    /etc/openldap/schema/inetorgperson.schema
> include     
>    /etc/openldap/schema/java.schema
> include     
>    /etc/openldap/schema/misc.schema
> include     
>    /etc/openldap/schema/nis.schema
> include     
>    /etc/openldap/schema/openldap.schema
> include     
>    /etc/openldap/schema/ppolicy.schema
> include     
>    /etc/openldap/schema/collective.schema
> include     
>    /etc/openldap/schema/samba.schema
> 
> allow bind_v2
> 
> pidfile     
>    /var/run/openldap/slapd.pid
> argsfile       
> /var/run/openldap/slapd.args
> 
> TLSCACertificateFile /etc/openldap/cacerts/cavictory2.crt
> TLSCertificateFile /etc/openldap/keys/victory3cert.pem
> TLSCertificateKeyFile /etc/openldap/keys/victory3key.pem
> 
> database        hdb
> suffix          "dc=srg,dc=com"
> checkpoint      1024 15
> rootdn         
> "cn=Manager,dc=srg,dc=com"
> 
> rootpw          {MD5}blah
> 
> directory       /var/lib/ldap
> 
> index objectClass           
>            eq,pres
> index ou,cn,mail,surname,givenname     
> eq,pres,sub
> index uidNumber,gidNumber,loginShell    eq,pres
> index uid,memberUid         
>            eq,pres,sub
> index nisMapName,nisMapEntry       
>     eq,pres,sub
> 
> syncrepl  rid=0
>        
> provider=ldap://victory2.srg.com:389
>         bindmethod=simple
>         starttls=critical
>        
> binddn="cn=replicator,dc=srg,dc=com"
>         credentials=blah
>         searchbase="dc=srg,dc=com"
>         logbase="cn=accesslog"
>         schemachecking=on
>         type=refreshAndPersist
>         retry="60 +"
>         syncdata=accesslog
> 
> updateref           
>    ldaps://victory2.srg.com
> 
> database monitor
> 
> access to *
>         by
> dn.exact="cn=Manager,dc=srg,dc=com" write
>         by * none
> 
> </consumer slapd.conf>
> 
> 
> --- On Thu, 8/20/09, Jonathan Clarke <jonathan@phillipoux.net>
> wrote:
> 
> > From: Jonathan Clarke <jonathan@phillipoux.net>
> > Subject: Re: top-level data entries not replicating,
> 2.4.15
> > To: "Brian Neu" <proclivity76@yahoo.com>
> > Cc: openldap-technical@openldap.org
> > Date: Thursday, August 20, 2009, 8:02 AM
> > On 19/08/2009 19:29, Brian Neu
> > wrote:
> > > Even with no logfilter on the consumer,
> > >     
> > cn=replicator,dc=domain,dc=com&
> > >     
> > sambaDomainName=SRG,dc=domain,dc=com
> > >
> > > don't replicate, even after wiping the database
> and
> > restarting.  Everything else seems to replicate
> fine.
> > >
> > > How do I get top-level data entries to
> replicate?
> > 
> > This really depends on your syncrepl configuration on
> the
> > consumer.
> > If you provide it here, maybe we can take a look.
> > 
> > Aside from that, the latest version, 2.4.17, contains
> a few
> > fixes that 
> > might help with this problem.
> > 
> > Jonathan
> >
>

Attachment: vg2-slapd.conf
Description: Binary data