[Date Prev][Date Next]
Re: Problem with replication
- To: OpenLDAP software list <openldap-software@OpenLDAP.org>
- Subject: Re: Problem with replication
- From: Johan A <email@example.com>
- Date: Tue, 13 Sep 2005 14:31:48 -0700 (PDT)
- Domainkey-signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; h=Message-ID:Received:Date:From:Subject:To:In-Reply-To:MIME-Version:Content-Type:Content-Transfer-Encoding; b=wQ9P88RwBBPgFhxK6cY0Zlw6fp2BrghEuF5tJJh9N9mGA2BEtRd1zRxWeFykikxZlZ3hMQH6vaTIXNlDCMpn9u7rwj6v75h47eErIrM3LLXg0A4LaDst+1ekSb/7/kzHhggyznpj+AlPXrLObC8lbUfZzZIskEBUxE6C7XWA+eM= ;
- In-reply-to: <6251004CF11A26DA88F762C0@[10.0.0.1]>
Thanks, I wasn't aware that slapadd did indexing.
The error in <slave>.rej seems always to be
ERROR: Insufficient access
which I can't see makes much sense. The Replicator can
add new entries to the slave and hence seem to be able
to write to it. And this setup is using the same
access controls as the first setup which works there.
So why can it add but not modify?
--- Quanah Gibson-Mount <firstname.lastname@example.org> wrote:
> --On Monday, September 12, 2005 11:55 PM -0700 Johan
> A <email@example.com>
> > Hi,
> > I had 2 machines with a working OpenLDAP
> > setup. But due to harddisk crash I wanted to move
> > to 2 new machines.
> > To do this I copied the both slapd.conf and edited
> > "replica" section with the new hostnames. I also
> > down the old LDAP master and dumped it to an LDIF
> > with slapcat. This file I read back with slapadd
> > both the new machines and then I indexed it with
> > slapindex.
> > However, this was perhaps a bit overoptimistic of
> > becouse now I have the problem that if I add a new
> > entry it appears like it's replicated to the slave
> > which is good. But if I try to change an entry it
> > stuck in <slave>.rej on the master.
> > So any help on what I might be missing is highly
> > appreciated.
> Just a quick note, slapadd does indexing if you have
> them defined, so there
> is generally no reason to run slapindex after
> running slapadd. Plus if you
> have properly configured your DB_CONFIG file, it
> will be faster to slapadd
> with indexing than to slapadd then index.
> Have you read the <slave>.rej files to see *why* the
> changes are being
> rejected? They always list the reason...
> Quanah Gibson-Mount
> Principal Software Developer
> ITSS/Shared Services
> Stanford University
> GnuPG Public Key:
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around