Re[2]: modify upon the root DSE not supported

[Alexander Lunyov <lan_mailing@startatom.ru>]

Hello Kurt,

KDZ> http://www.google.com/search?q=Gawor+ldap+referral+master+slave

   I didn't find there any help, but did you mean that client is
   broken? Tell me just that - what is the mean of error "modify upon
   the root DSE not supported"? Fact is the client trying to update
   to slave, then slave do referral, then client is trying to update
   master under the same DN as it was trying to update to slave
   (cn=usermaster,o=Ent,c=RU), then client gets that (strange for me)
   error. If i will try to update master under that DN
   (cn=usermaster), everything works fine.

   So, with referral i have in master log:

Jun  2 18:14:59 helios slapd[64158]: daemon: conn=10313 fd=21 connection from IP
=66.66.66.2:1122 (IP=0.0.0.0:389) accepted.
Jun  2 18:14:59 helios slapd[64158]: conn=10313 op=0 BIND
dn="CN=USERMASTER,O=ENT,C=RU" method=128
Jun  2 18:14:59 helios slapd[64158]: conn=10313 op=0 RESULT tag=97 err=0 text=
Jun  2 18:14:59 helios slapd[64158]: do_modify: root dse!
Jun  2 18:14:59 helios slapd[64158]: conn=10313 op=1 RESULT tag=103 err=53 text=
modify upon the root DSE not supported
Jun  2 18:15:06 helios slapd[64158]: conn=-1 fd=19 closed
Jun  2 18:15:10 helios slapd[64158]: conn=-1 fd=20 closed   
   
   And if i'll bind directly to master with that DN (cn=usermaster) -
   everything works fine (and after update replica goes to slave and
   all is great).

Jun  2 18:17:31 helios slapd[64158]: conn=10313 op=2 UNBIND
Jun  2 18:17:31 helios slapd[64158]: conn=-1 fd=21 closed
Jun  2 18:17:36 helios slapd[64158]: daemon: conn=10324 fd=19 connection from IP
=66.66.66.2:1124 (IP=0.0.0.0:389) accepted.
Jun  2 18:17:36 helios slapd[64158]: conn=10324 op=0 BIND
dn="CN=USERMASTER,O=ENT,C=RU" method=128
Jun  2 18:17:36 helios slapd[64158]: conn=10324 op=0 RESULT tag=97 err=0 text=
Jun  2 18:17:36 helios slapd[64158]: conn=10324 op=1 SRCH
base="o=Ent,c=RU" scope=1 filter="(objectClass=*)"
Jun  2 18:17:36 helios slapd[64158]: conn=10324 op=1 SEARCH RESULT tag=101 err=0
 text=
Jun  2 18:17:38 helios slapd[64158]: conn=10324 op=2 SRCH
base="ou=users, o=Ent,c=RU" scope=1 filter="(objectClass=*)"
Jun  2 18:17:39 helios slapd[64158]: conn=10324 op=2 SEARCH RESULT tag=101 err=0
 text=
Jun  2 18:17:46 helios slapd[64158]: conn=10324 op=3 SRCH base="uid=test99, ou=u
sers, o=Ent,c=RU" scope=0 filter="(objectClass=*)"
Jun  2 18:17:46 helios slapd[64158]: conn=10324 op=3 SEARCH RESULT tag=101 err=0
 text=
Jun  2 18:17:49 helios slapd[64158]: conn=10324 op=4 MOD dn="uid=test99, ou=user
s, o=Ent,c=RU"
Jun  2 18:17:49 helios slapd[64158]: conn=10324 op=4 RESULT tag=103 err=0 text=
Jun  2 18:17:49 helios slapd[64158]: conn=10324 op=5 SRCH base="uid=test99, ou=u
sers, o=Ent,c=RU" scope=0 filter="(objectClass=*)"
Jun  2 18:17:49 helios slapd[64158]: conn=10324 op=5 SEARCH RESULT tag=101 err=0
 text=
   

 I've read that some client after referral binding anonymously, but
 it's not that case - client binding to master with the same DN as it
 tries before with slave. What should i do?

 On master i have config

database    ldbm
password-hash   {MD5}
suffix      "o=Ent,c=RU"
rootdn      "cn=root,o=Ent,c=RU"
rootpw      rootsecret
directory   /var/db/openldap-ldbm
index   objectClass eq
replogfile  /var/log/slapd.replog

replica     host=slave.domain.ru:389
            binddn="cn=replica,o=Ent,c=RU"
            bindmethod=simple   credentials=replicasecret


 And the slave is

database    ldbm
password-hash   {MD5}
suffix      "o=Ent,c=RU"
rootdn      "cn=root,o=Ent,c=RU"
rootpw      rootsecret
directory   /var/db/openldap-ldbm/
index   objectClass eq
updatedn    "cn=replica,o=Ent,c=RU"
updateref   "ldap://master.domain.ru:389";


KDZ> At 11:39 PM 5/30/2003, Alexander Lunyov wrote:
>>Hello openldap-software,
>>
>>  Sorry for bothering with maybe dumb question, but i'm definitely
>>  stuck.
>>  
>>  I have two OpenLDAP-2.0.25 servers, master and slave. Replication
>>  from master to slave work's fine, but when i'm trying to update some
>>  entry on slave - in master's log i see "modify upon the root DSE not
>>  supported", though for update i bind as non-root DN
>>  (cn=usermaster,o=Ent,c=RU).
>>
>>  Client is LDAP Browser/Editor 2.8.2 by Jarek Gawor (written in java).
>>



-- 
Best regards,
 Alexander                            mailto:lan_mailing@startatom.ru