[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
replication, slave slapds and updatedn
I'm trying to get a slave slapd setup.
master->slave replication works fine, but i can not get clients to
properly follow the refferal for updates given out by the slave.
Initially i had:
updateref "ldap://hibernia.foo.org/dc=foo,dc=org";
i could see that clients were getting some kind of refferal from the
logs because they contact 'hibernia' for MODs, however the DN they
try to bind with is blank - so clients get 'insufficient access'.
>From the logs:
May 9 01:41:54 fogarty slapd[5903]: conn=0 op=1 BIND
dn="UID=PAUL,OU=PEOPLE,DC=FOO,DC=ORG" method=128
May 9 01:41:54 fogarty slapd[5903]: conn=0 op=1 RESULT tag=97 err=0
text=
May 9 01:41:54 fogarty slapd[5903]: conn=0 op=2 MOD
dn="uid=paul,ou=people,dc=foo,dc=org"
May 9 01:41:54 fogarty slapd[5903]: conn=0 op=2 RESULT tag=103
err=10 text=
May 9 01:41:54 hibernia slapd[20557]: daemon: conn=80 fd=16
connection from IP=192.168.0.4:33477 (IP=:: 389) accepted.
May 9 01:41:54 hibernia slapd[20557]: conn=80 op=0 BIND dn=""
method=128
May 9 01:41:54 hibernia slapd[20557]: conn=80 op=0 RESULT tag=97
err=0 text=
May 9 01:41:54 hibernia slapd[20557]: conn=80 op=1 MOD
dn="uid=paul,ou=people,dc=foo,dc=org"
May 9 01:41:54 hibernia slapd[20557]: conn=80 op=1 RESULT tag=103
err=50 text=
fogarty is the slave slapd, hibernia is the master.
I have also tried the following in fogarty's slapd.conf:
updateref "ldap://hibernia.foo.org/dc=foo,dc=org?dc";
updateref "ldap://hibernia.foo.org/dc=foo,dc=org?dc,cn";
updateref "ldap://hibernia.foo.org";
with no sucess.
On a related note: I'd like to add a special replication user, but i
do not know how to set the password. What attribute do you add/modify
to set/change passwords for DNs?
I'd like to do this too for entries in ou=hosts,dc=... so that i can
have workstations that do LDAP NSS bind with their own dedicated DN.
thanks,
--
Paul Jakma paul@clubi.ie paul@jakma.org
PGP5 key: http://www.clubi.ie/jakma/publickey.txt
-------------------------------------------
Fortune:
If the aborigine drafted an IQ test, all of Western civilization would
presumably flunk it.
-- Stanley Garn