Re: Can't contact server for syncrepl but can ldapsearch

To: Marc Patermann <hans.moser@ofd-z.niedersachsen.de>

Subject: Re: Can't contact server for syncrepl but can ldapsearch

From: Carlo Santos <moonseraph128@gmail.com>

Date: Mon, 4 Feb 2013 20:46:58 +0800

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=cNuAkTzdBRLWexa8m4M/9wyIaRCb4MwBLX5z7gDyqpA=; b=tZwadYgz+ktj1ua8TVx3IdoZ2Ec8qOCfCuj6igvDRsnP8bpB2NgZPTeL0UOU4rdvD3 MhvP/jspAZPS/F0rboaaGuMj+mnh2mUx0a/H8T+A/Fx9ymaoS85EJ7MQkxhubxzsRFFP iM8zVvGK1W61DLHJP18G6zRoQMHyzcv9Z4Eh/xekYvlZMgo3QqHy1QJ1s6gftvhLR16l VTtN8bpp3hqZX+OMg33OpwQpE+Ds3JxwefX2Mr8rG+WBLISivJJMR9xpvN84N0nDR/Um KAosnK78Viaqq8ntAk2fLZMS44bVkkxzlkn265dv5TDhr0w9RcsNjAHUNdpfiNrfa6RD 7jnA==

In-reply-to: <510FA974.9040500@ofd-z.niedersachsen.de>

References: <CAGxRVpOm4vJEjmTe0Cas9n+dY+KV3aGaaLPnseT=khBS-mBgqA@mail.gmail.com> <510FA974.9040500@ofd-z.niedersachsen.de>

Carlo,

Carlo Santos schrieb (04.02.2013 09:02 Uhr):

olcSyncRepl: {2}rid=002 provider=ldaps://ldap2.myorganization.org binddn="cn=admin,dc=myorganization,dc=org" bindmethod=simple credentials=password searchbase="dc=myorganization,dc=org" type=refreshOnly interval=00:00:05:00 retry="5 5 300 5" timeout=1

What is the exact ldapsearch you used?

The ldapsearch command I used is this:

ldapsearch -xLLLD "cn=admin,dc=myorganization,dc=org" -H ldaps://ldap1.myorganization.org -b "dc=myorganization,dc=org" -W

Your provider is configured with ldaps, is ldaps started on your servers und did you try ldapsearch with ldaps?

Yes ldaps is enabled on both servers.

Also, I forgot to mention, I got the line do_syncrep2: rid=002 LDAP_RES_INTERMEDIATE - SYNC_ID_SET multiple times before a single do_syncrep2: rid=002 (-1) Can't contact LDAP server is displayed in the slapd logs.

Does this mean anything?

Marc