Re: OpenLDAP Syncrepl issue

[Klaus Lemkau <klaus.lemkau@tu-berlin.de>]

Dieter Kluenter wrote:
> "Luis Castillo" <lcastillo@emergenow.com> writes:
>
>   
> > Yes, I read the admin guide and changed the parameters required. I am
> > pointing to the right server and port and I tested the connection to the
> > master by using an LDAP browser but it's still not replicating.
> >     
>
> [ This is a constant problem of top quoting. ]
>   
> > > I am having an issue getting the OpenLDAP to replicate using syncrepl.
> > > Basically, after configuring the consumer I can start the slapd
> > >       
> > process
> >     
> > > but I see no replication happening. Do you have a sample configuration
> > > file that can provide more info? Is there anything required on the
> > > master?
> > >       
On the master You have to load the syncprov overlay.
see:
 http://www.openldap.org/doc/admin24/overlays.html#Sync Provider

example from there:

overlay syncprov
syncprov-checkpoint 100 10

Also check, that Your replicating server can read the all entrys
You want to replicate from the master server.
eg. do a
ldapsearch -x -h YOUR_MASTERSERVER -b YOUR_SEARCHBASE
from the replicating LDAP-server
example:
ldapsearch -xh master.example.org -b dc=example,dc=org

If no entrys are returned check permissions on the master.
see:
http://www.openldap.org/doc/admin24/access-control.html
and
man 5 slapd.access
If not all entrys are returned, check sizelimit on the master.
The default value for sizelimit is 500 Entrys, meaning that
not more than 500 entrys are returnd for a search request.
look for "sizelimit" in
man 5 slapd.conf

Here an simple example for the synrepl part of the client slapd.conf You 
can start with:
syncrepl        rid=111
               provider="ldap://master.example.org";
               bindmethod=simple
               searchbase="dc=example,dc=org"
               filter="(objectClass=*)"
               schemachecking=off
               scope=sub
               type=refreshAndPersist
               interval=00:00:01:00
               retry="60 10 300 10"
updateref       "ldap://master.example.org";

Edit rid, provider, searchbase and updateref for Your needs.
After getting it running, You can play with other parameters.
> > Did you read the admin guide?  It has example in it.
> >     
>
> Set debug level to sync
>
> -Dieter
>
>   

- Klaus