Second base basetree import in openldap server, with replication set for first base, with ldif file fales with error: ldap_bind: Referral

["Didier Geheniau" <didier.geheniau@feas.net>]

Can someone tel me whats wrong?

Slapd.conf file:

# $OpenLDAP: pkg/ldap/servers/slapd/slapd.conf,v 1.8.8.6 2001/04/20
23:32:43 kurt Exp $
#
# See slapd.conf(5) for details on configuration options.
# This file should NOT be world readable.
#
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/inetorgperson.schema

loglevel -1
# Define global ACLs to disable default read access.

# Do not enable referrals until AFTER you have a working directory
# service AND an understanding of referrals.
#referral       ldap://root.openldap.org

pidfile /var/run/slapd.pid
argsfile /var/run/slapd.args

# Load dynamic backend modules:
# modulepath    /usr/lib/openldap/openldap
# moduleload    back_ldap.la
# moduleload    back_ldbm.la
# moduleload    back_passwd.la
# moduleload    back_shell.la

#######################################################################
# ldbm database definitions feas.com
#######################################################################

database ldbm
replica host=<host2>:391
        binddn="uid=replication,dc=<domain1>,dc=net"
        bindmethod=simple credentials=<secret>
replogfile /var/run/openldap-slurpd

suffix "dc=<domain1>,dc=net"
rootdn "cn=Manager,dc=<domain1>,dc=net"
rootpw <secret>
# The database directory MUST exist prior to running slapd AND
# should only be accessible by the slapd/tools. Mode 700 recommended.
directory /var/lib/ldap

# Indices to maintain
index   objectClass     eq
# ldbm access control definitions
access to attr=userPassword
        by self write
        by anonymous auth
        by dn="cn=Manager,dc=<domain1>,dc=net" write
        by dn="uid=replication,dc=<domain1>,dc=net" write
        by * none
access to *
        by self write
        by dn="cn=Manager,dc=<domain1>,dc=net" write
        by dn="uid=replication,dc=<domain1>,dc=net" write
        by * read


database ldbm
suffix "dc=<domain2>, dc=com"
rootdn "cn=Manager, dc=<domain2>, dc=com"
rootpw <secret>

directory /var/lib/ldap_<domain2>.com

Used command:
# newserver:/etc/openldap # ldapadd -x -D "cn=Manager, dc=<domain2>,
dc=com" -W -f base2.ldif
Echo on console:
 Enter LDAP Password:
 ldap_bind: Referral


Same config on server without replication set is working!

Regards,

Didier