[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
Trying to Mirror 2 OpenLDAP servers
- To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
- Subject: Trying to Mirror 2 OpenLDAP servers
- From: "Sterling Sahaydak" <sterling.sahaydak@pi-coral.com>
- Date: Thu, 04 Sep 2014 21:14:36 +0000
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pi-coral.com; s=google; h=from:to:subject:date:message-id:reply-to:user-agent:mime-version :content-type; bh=xjfCGDUUHt4F4I1WNAqefCiOLns6cEqHmlIogwrgnj0=; b=X5VpHXZP5+sif7zCSxTWVSJVJyu/p29MZiu8FXBlx/gLI8D1oypp7d3xyO+wTynjNJ 9MhhHoXVWzlgwt/7M6a3oSLFXqPGJAbd+AjwYOpz8Q6tsuU+B0g/i2hW1WMSaXrebKWP Y/cwCGvD7izXYnGrF/qUcPKmO9SIWkr06Rj1E=
- User-agent: eM_Client/6.0.20617.0
Just updated slapd.conf with CA Certs and trying to get mirroring synchronization to work.
Running into the following:
slapd -d sync
@(#) $OpenLDAP: slapd 2.4.23 (Feb 3 2014 19:11:35) $
mockbuild@c6b10.bsys.dev.centos.org:/builddir/build/BUILD/openldap-2.4.23/openldap-2.4.23/build-servers/servers/slapd/etc/openldap/slapd.conf: line 163: warning, destination attributeType 'sAMAccountName' is not defined in schema
PROXIED attributeDescription "SAMACCOUNTNAME" inserted.
/etc/openldap/slapd.conf: line 213: rootdn is always granted unlimited privileges.
bdb_monitor_db_open: monitoring disabled; configure monitor database to enable
slapd starting
TLS: error: the certificate '/etc/openldap/certs/ldap_example_net.crt' could not be found in the database - error -12285:Unable to find the certificate or key necessary for authentication..
TLS: certificate '/etc/openldap/certs/ldap_example_net.crt' successfully loaded from PEM file.
TLS: no unlocked certificate for certificate 'CN=ldap.example.net,O="xx-xxxxxxx, INC.",L=xxxx,ST=xxxxxx,C=US'.
do_syncrep2: rid=001 LDAP_RES_INTERMEDIATE - REFRESH_DELETE
In my slapd.conf I have setup (Provider setup):
TLSCertificateFile /etc/openldap/certs/ldap_example_net.crt
TLSCertificateKeyFile /etc/openldap/certs/ldap_example_net.key
TLSCACertificateFile /etc/openldap/certs/CAcompany.crt
serverID 1
overlay syncprov
#syncprov-checkpoint 100 10
syncprov-checkpoint 100 2
syncprov-sessionlog 100
#LDAP Sync - Slave - Consumer
syncrepl rid=001
provider=ldaps://ldap-west.examplel.net
bindmethod=simple
binddn="cn=xxxxx,ou=Roles,dc=pcoral,dc=net"
credentials=xxxxxxxxxxxx
searchbase="dc=example,dc=net"
filter="(objectclass=*)"
attrs="*"
schemachecking=on
type=refreshAndPersist
interval=00.00.00:30
retry="60 +"
mirrormode on
So, not sure why the synchronization isn't working?
Thanks!!!