The provider is loaded with slapadd -w -F -f
-l, while the consumer is started with an empty database. The initial
database is replicated by the consumer but no further synchronisation
occurs. I tested read access to all databases with ldapsearch so there
is no hidden access rule that prevents from reading.
On the consumer I see many
do_syncrep2: rid=003 got search entry without Sync State control
do_syncrepl: rid=003 retrying (4 retries left)
I don't know wether this is important.
this are my configuration files
,----[ provider slapd.conf ]
| database config
| rootdn  cn=config
| rootpw  secret
| access to dn.subtree="cn=config" by dn.exact="cn=replicator,o=avci,c=de" read
| overlay syncprov
|
| database        bdb
| suffix          "o=avci,c=de"
| rootdn          "cn=admin,o=avci,c=de"
| rootpw          secret
| ...
|
| overlay accesslog
| logdb   cn=log
| logops writes
| logpurge 3+00:00 1+00:00
|
| overlay syncprov
| syncprov-checkpoint 5 10
|
| database bdb
| suffix cn=log
| directory /tmp/slapd1/log
| rootdn cn=log
| index reqStart eq
| access to dn.subtree="cn=log" by dn.exact="cn=replicator,o=avci,c=de" read
| database monitor
`----
,----[ consumer slapd.conf ]
| database config
| rootdn  cn=config
| rootpw  hhdy01
| access to dn.subtree="cn=config" by dn.exact="cn=replicator,o=avci,c=de" read
|
| syncrepl rid=01
|         provider=ldap://localhost:1007
|         bindmethod=sasl
|         saslmech=digest-md5
|         authcid=replicator
|         credentials=xxxxxx
|         searchbase="cn=config"
|         scope=sub
|         attrs="*","+"
|         type=refreshAndPersist
|         retry="5 5 300 5"
| MirrorMode off
|
| database        bdb
| suffix          "o=avci,c=de"
| rootdn          "cn=admin,o=avci,c=de"
| rootpw          secret
| syncrepl rid=03
|         provider="ldap://localhost:9007"
|         bindmethod=sasl
|         saslmech=digest-md5
|         authcid=replicator
|         credentials=replicator
|         searchbase="o=avci,c=de"
|         scope=sub
|         attrs="*","+"
|         type=refreshAndPersist
|         retry="5 5 300 5"
|         logbase="cn=log"
|         syncdata=accesslog
|
| updateref ldap://localhost:9007
| MirrorMode off
|
| overlay accesslog
| logdb   cn=log
| logops writes
| logpurge 3+00:00 1+00:00
| index reqStart eq
|
| database bdb
| suffix cn=log
| directory /tmp/slapd2/log
| rootdn cn=log
| index reqStart eq
| access to dn.subtree="cn=log" by dn.exact="cn=replicator,o=avci,c=de" read
|
| database monitor
`----
-Dieter