[Date Prev][Date Next] [Chronological] [Thread] [Top]

N-Way Multimaster. No base DN returned from server.



Hi there.

I followed the documentation in openldap website for setting up a
N-Way multimaster LDAP cluster. I have two nodes, but I will be
expanding to 3 or 4 in a near future.
When doing an ldapsearch, I get all the server data, but when accesing
with ApacheDirectoryStudio (with same credentials) I get nothing.
Nothing is wrong in logfiles. I guess a problem in ACLs, but it
doesn't work even when binding as RootDN (and as seen in oficial
documentation, rootdn is over the scope of any ACL)

The replication system is working well, afaik.

I've readed folk with same problems, but not exactly; here:
http://www.openldap.org/lists/openldap-technical/201004/msg00195.html

Anyone could take a look on this?

Version: 2.4.23-7.2

My cfg (slapd.d over Debian Stable ):


dn: olcDatabase={1}hdb
objectClass: olcDatabaseConfig
objectClass: olcHdbConfig
olcDatabase: {1}hdb
olcDbDirectory: /var/lib/ldap
olcSuffix: dc=example,dc=es
olcLastMod: TRUE
olcRootDN: cn=admin,dc=example,dc=es
olcDbCheckpoint: 512 30
olcDbConfig: {0}set_cachesize 0 2097152 0
olcDbConfig: {1}set_lk_max_objects 1500
olcDbConfig: {2}set_lk_max_locks 1500
olcDbConfig: {3}set_lk_max_lockers 1500
structuralObjectClass: olcHdbConfig
olcRootPW: asdasd
olcLimits: dn.exact="cn=admin,dc=example,dc=es" time.soft=unlimited
time.hard=unl
 imited size.soft=unlimited size.hard=unlimited
olcSyncrepl: {0}rid=003 provider="ldaps://ldap1.example.es/"
binddn="cn=admin,dc=
 example,dc=es" bindmethod=simple credentials=asdasd se
 archbase="dc=example,dc=es" type=refreshOnly interval=00:00:00:10
retry="5 5 300
 5" timeout=1
olcSyncrepl: {1}rid=004 provider="ldaps://ldap2.example.es/"
binddn="cn=admin,dc=
 example,dc=es" bindmethod=simple credentials=asdasd se
 archbase="dc=example,dc=es" type=refreshOnly interval=00:00:00:10
retry="5 5 300
 5" timeout=1
olcMirrorMode: TRUE
olcDbIndex: objectClass,eduPersonEntitlement,memberUID,uid,mail eq
olcAccess: {0}to dn.base="dc=example,dc=es" by
dn="cn=admin,dc=example,dc=es" manage
olcAccess: {1}to dn.base="cn=Subschema" by * read


-- 
/* Arturo Borrero Gonzalez || cer.inet@linuxmail.org */
/* Use debian gnu/linux! Best OS ever! */