[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Syncrepl and problem with ldap_sasl_bind_s failed?



Howard Chu wrote:
> Howard Chu wrote:
>> Clearly you have a mistake in the password of one of these two lines, because
>> if they were identical they would be identical in length, but they wrap the
>> "refreshAndPersist" in two different positions.
>>
> PS: Most mistakes are obvious if you actually pay attention to details.

Hmm, maybe it's obvious for you but I don't see the fault since there are no
real passwords in there. The line wrapping is messed up my mail
formatting anyway.

> But LDIF config format makes mistakes like these even more obvious. Good
> luck emailing a slapd.conf with this type of mistake in it and having the
> problem still be apparent after being mangled and rewrapped by multiple
> mail agents.

LDIF can be mangled too because RFC 2849 mandates 76 chars per line and most
non-HTML MUAs wrap lines at 72 chars per line.

I prefer examining attribute 'olcSyncrepl' with web2ldap. Recent versions
display a clickable LDAP URL parsed from the attribute value including bind-DN
and password which you can directly chase with web2ldap with one click. This
gives you a really quick and correct check whether the value actually works. :-)

Ciao, Michael.


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature