The provider is loaded with slapadd -w -F -f
-l, while the consumer is started with an empty database. The initial
database is replicated by the consumer but no further synchronisation
occurs. I tested read access to all databases with ldapsearch so there
is no hidden access rule that prevents from reading.
On the consumer I see many
do_syncrep2: rid=003 got search entry without Sync State control
do_syncrepl: rid=003 retrying (4 retries left)
I don't know wether this is important.
this are my configuration files
,----[ provider slapd.conf ]
| database config
| rootdn cn=config
| rootpw secret
| access to dn.subtree="cn=config" by dn.exact="cn=replicator,o=avci,c=de" read
| overlay syncprov
|
| database bdb
| suffix "o=avci,c=de"
| rootdn "cn=admin,o=avci,c=de"
| rootpw secret
| ...
|
| overlay accesslog
| logdb cn=log
| logops writes
| logpurge 3+00:00 1+00:00
|
| overlay syncprov
| syncprov-checkpoint 5 10
|
| database bdb
| suffix cn=log
| directory /tmp/slapd1/log
| rootdn cn=log
| index reqStart eq
| access to dn.subtree="cn=log" by dn.exact="cn=replicator,o=avci,c=de" read
| database monitor
`----
,----[ consumer slapd.conf ]
| database config
| rootdn cn=config
| rootpw hhdy01
| access to dn.subtree="cn=config" by dn.exact="cn=replicator,o=avci,c=de" read
|
| syncrepl rid=01
| provider=ldap://localhost:1007
| bindmethod=sasl
| saslmech=digest-md5
| authcid=replicator
| credentials=xxxxxx
| searchbase="cn=config"
| scope=sub
| attrs="*","+"
| type=refreshAndPersist
| retry="5 5 300 5"
| MirrorMode off
|
| database bdb
| suffix "o=avci,c=de"
| rootdn "cn=admin,o=avci,c=de"
| rootpw secret
| syncrepl rid=03
| provider="ldap://localhost:9007"
| bindmethod=sasl
| saslmech=digest-md5
| authcid=replicator
| credentials=replicator
| searchbase="o=avci,c=de"
| scope=sub
| attrs="*","+"
| type=refreshAndPersist
| retry="5 5 300 5"
| logbase="cn=log"
| syncdata=accesslog
|
| updateref ldap://localhost:9007
| MirrorMode off
|
| overlay accesslog
| logdb cn=log
| logops writes
| logpurge 3+00:00 1+00:00
| index reqStart eq
|
| database bdb
| suffix cn=log
| directory /tmp/slapd2/log
| rootdn cn=log
| index reqStart eq
| access to dn.subtree="cn=log" by dn.exact="cn=replicator,o=avci,c=de" read
|
| database monitor
`----
-Dieter