Re: (ITS#3616) Syncrepl and rootless installations

[hyc@symas.com]

I think we may need to see more context of your slapd.conf for both 
provider and consumer. This setup is working fine in my tests now. Here 
is an excerpt from the test017 configurations; the only significant 
thing I changed was the suffix and searchbase. I of course had to also 
create a stub "dc=com" entry in order for the default test data set to load.

provider:
###
database    bdb
suffix      ""
directory   ./testrun/db.1.a
rootdn      "cn=Manager,dc=example,dc=com"
rootpw      secret
index       objectClass eq
index       cn,sn,uid   pres,eq,sub
index       entryUUID,entryCSN  eq

overlay syncprov
###

consumer:
###
database    bdb
suffix      ""
directory   ./testrun/db.2.a
rootdn      "cn=Replica,dc=example,dc=com"
rootpw      secret
index       objectClass eq
index       cn,sn,uid   pres,eq,sub
index       entryUUID,entryCSN  eq

syncrepl rid=1
         provider=ldap://localhost:9011/
         binddn="cn=Manager,dc=example,dc=com"
         bindmethod=simple
         credentials=secret
         searchbase=""
         filter="(objectClass=*)"
         schemachecking=off
         scope=sub
         type=refreshOnly
         interval=00:00:00:10
updateref   ldap://localhost:9011/

overlay syncprov
syncprov-sessionlog 100
###


rob@dsvr.net wrote:

>Providers/Consumers cvs updated to 20040514
>
>slapadd'ing a slapcat with a rootless 'dn:' entry now works fine, thanks.
>
>There is still however a replication issue as I cannot get my consumers 
>to replicate correctly:
>
>Log from the provider:
>
>conn=109 op=2 UNBIND
>conn=109 fd=13 closed
>conn=110 fd=13 ACCEPT from IP=10.100.0.109:42970 (IP=0.0.0.0:389)
>conn=110 op=0 BIND dn="cn=root" method=128
>conn=110 op=0 BIND dn="cn=root" mech=SIMPLE ssf=0
>conn=110 op=0 RESULT tag=97 err=0 text=
>conn=110 op=1 SRCH base="" scope=2 deref=0 filter="(objectClass=*)"
>conn=110 op=1 SRCH attr=* +
>conn=110 op=1 SEARCH RESULT tag=101 err=53 nentries=0 text=control 
>unavailable in context
>
>The following ldapsearch on the consumer works ok:
>
>$ ldapsearch -x -w foobar -h 10.7.20.14 -b '' -D 'cn=root' '(objectClass=*)'
>
>So the consumer should be able to search for new updated, but doesn't 
>seem to be able to?
>


-- 
  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc
  Symas: Premier OpenSource Development and Support