[Date Prev][Date Next] [Chronological] [Thread] [Top]

trouble with replication (skip repl record)



hello,

i'm trying to set up replication beetween a master ldap and a slave ldap.
i following the OpenLDAP 2.x admin guide but when adding 2 entries in the
master ldap, the replication doesn't work on slave. the 2 entries were skipped
(2 last lines of the log).

master ldap slurpd log (level = -1) :
-------------------------------------
Config: ** configuration file successfully read and parsed
Config: (schemacheck on)
Config: (pidfile                /var/run/slapd.pid)
Config: (argsfile       /var/run/slapd.args)
Config: (replogfile     /var/lib/ldap/replog)
Config: (loglevel       -1)
Config: (database       ldbm)
Config: (suffix         "dc=univ-lille3,dc=fr")
Config: (rootdn         "cn=rootdn,dc=univ-lille3,dc=fr")
Config: (rootpw {SSHA}v9MExqiXgYH5umjtTykEfHcKdysQ3611)
Config: (directory      /var/lib/ldap)
Config: (replica host=10.131.0.6:389 binddn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" 
bindmethod=simple credentials=secretword)
Config: ** successfully added replica "10.131.0.6:389"
Config: (index  objectClass,uid,uidNumber,gidNumber,memberUid   eq      )
Config: (index  cn,mail                       eq,subinitial)
Config: (access to attribute=userPassword by anonymous auth by self read by
dn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" write by
dn="cn=mailadmin,ou=admin,dc=univ-lille3,dc=fr" read by dn="cn=ftpadmin,ou=admin,dc=univ-lille3,dc=fr"
read by dn="cn=smbadmin,ou=admin,dc=univ-lille3,dc=fr" read by * none)
Config: (access to * by anonymous auth by dn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" write       
by dn="cn=mailadmin,ou=admin,dc=univ-lille3,dc=fr" read        by
dn="cn=ftpadmin,ou=admin,dc=univ-lille3,dc=fr" read        by
dn="cn=smbadmin,ou=admin,dc=univ-lille3,dc=fr" read by self read )
Config: ** configuration file successfully read and parsed
begin replication thread for 10.131.0.6:389
Replica 10.131.0.6:389, skip repl record for uid=etu4.etu4,ou=etu,dc=univ-lille3,dc=fr (not mine)
Replica 10.131.0.6:389, skip repl record for uid=etu5.etu5,ou=etu,dc=univ-lille3,dc=fr (not mine)


can anybody help me ?
i'm sure the credentials for the binddn replication entry used (my entry
cn=ldapamin) is OK ; it has write ACL for all attributes.


here's my slapd.conf for both machines

MASTER :
-------
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/redhat/rfc822-MailMember.schema
include         /etc/openldap/schema/redhat/autofs.schema
include         /etc/openldap/schema/redhat/kerberosobject.schema
include          /etc/openldap/schema/qmail.schema
include          /etc/openldap/schema/authldap.schema
include          /etc/openldap/schema/samba.schema
include         /etc/openldap/schema/l3-user.schema
schemacheck on
pidfile         /var/run/slapd.pid
argsfile        /var/run/slapd.args
replogfile      /var/lib/ldap/replog
loglevel        -1
database        ldbm
suffix          "dc=univ-lille3,dc=fr"
rootdn          "cn=rootdn,dc=univ-lille3,dc=fr"
rootpw {SSHA}v9MExqiXgYH5umjtTykEfHcKdysQ3611
directory       /var/lib/ldap
replica host=10.131.0.6:389 binddn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" bindmethod=simple 
credentials=secretword
index  objectClass,uid,uidNumber,gidNumber,memberUid   eq
index  cn,mail                       eq,subinitial
access to attribute=userPassword
        by anonymous auth
        by self read
        by dn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" write
        by dn="cn=mailadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=ftpadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=smbadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by * none
access to *
        by anonymous auth
        by dn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" write
        by dn="cn=mailadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=ftpadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=smbadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by self read


SLAVE :
-------
include         /etc/openldap/schema/core.schema
include         /etc/openldap/schema/cosine.schema
include         /etc/openldap/schema/inetorgperson.schema
include         /etc/openldap/schema/nis.schema
include         /etc/openldap/schema/redhat/rfc822-MailMember.schema
include         /etc/openldap/schema/redhat/autofs.schema
include         /etc/openldap/schema/redhat/kerberosobject.schema
include          /etc/openldap/schema/qmail.schema
include          /etc/openldap/schema/authldap.schema
include          /etc/openldap/schema/samba.schema
include          /etc/openldap/schema/l3-user.schema
schemacheck on
pidfile         /var/run/slapd.pid
argsfile        /var/run/slapd.args
loglevel -1
database        ldbm
suffix          "dc=univ-lille3,dc=fr"
rootdn          "cn=rootdn,dc=univ-lille3,dc=fr"
rootpw {SSHA}v9MExqiXgYH5umjtTykEfHcKdysQ3611
directory       /var/lib/ldap
updatedn        "cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr"
updateref       "ldap://10.131.0.5:389";
index  objectClass,uid,uidNumber,gidNumber,memberUid   eq
index  cn,mail                       eq,subinitial
access to attribute=userPassword
        by anonymous auth
        by self read
        by dn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" write
        by dn="cn=mailadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=ftpadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=smbadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by * none
access to *
        by anonymous auth
        by dn="cn=ldapadmin,ou=admin,dc=univ-lille3,dc=fr" write
        by dn="cn=mailadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=ftpadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by dn="cn=smbadmin,ou=admin,dc=univ-lille3,dc=fr" read
        by self read



Thank you for your help

---- 
Arnaud Jayet
ajayet@free.fr
----