Re: Replication error: Invalid credentials

["Pierangelo Masarati" <ando@sys-net.it>]

does each replicadn exist in each slave db?
do the credentials match?  Can you do a simple
bind e.g. via ldapsearch using those creds?

p.

> Hi all,
> Any ideas why I would get the following error when starting slurpd:
>
> Error: ldap_simple_bind_s for ldap2-int.domain.ca:389 failed: Invalid
> credentials
>
>
> MASTER SLAPD.CONF ENTRIES:
> #######################################################################
> # bdb#1 database definitions
> #######################################################################
> database        bdb
> suffix          "o=domain.ca"
> rootdn          "cn=root,o=domain.ca"
> rootpw xxx
>
> directory       /domain/ldap-data
>
> index   objectClass,uid,uidNumber,gidNumber,memberUid eq
> index   cn,mail,surname,givenname                      eq,subinitial
>
> replogfile /domain/ldap-slurp/domain.ca.replog
> replica host=ldap2-int.domain.ca:389
>          binddn="cn=replicator,o=domain.ca"
>          bindmethod=simple credentials=secret
>
> #######################################################################
> # bdb#2 database definitions
> #######################################################################
> database        bdb
> suffix          "o=domainauth"
> rootdn          "cn=root,o=domainauth"
> rootpw xxx
>
> directory       /domain/ldap-data
>
> index   objectClass,uid,uidNumber,gidNumber,memberUid eq
> index   cn,mail,surname,givenname                     eq,subinitial
>
>
> replogfile /domain/ldap-slurp/domainauth.replog
> replica host=ldap2-int.domain.ca:389
>          binddn="cn=replicator,o=domainauth"
>          bindmethod=simple credentials=secret
>
>
> SLAVE SLAPD.CONF ENTRIES:
> #######################################################################
> # bdb#1 database definitions
> #######################################################################
> database        bdb
> suffix          "o=domain.ca"
> rootdn          "cn=root,o=domain.ca"
> rootpw xxx
>
> directory       /domain/ldap-data
>
> index   objectClass,uid,uidNumber,gidNumber,memberUid, eq
> index   cn,mail,surname,givenname                      eq,subinitial
>
> updatedn "cn=replicator,o=domain.ca"
> updateref ldap://ldap1-int.domain.ca/
>
> access to dn=".*,o=domain.ca"
>   by dn="cn=replicator,o=domain.ca" write
>   by * read
>
> #######################################################################
> # bdb#2 database definitions
> #######################################################################
> database        bdb
> suffix          "o=domainauth"
> rootdn          "cn=root,o=domainauth"
> rootpw xxx
>
> directory       /domain/ldap-data
>
> index   objectClass,uid,uidNumber,gidNumber,memberUid   eq
> index   cn,mail,surname,givenname                       eq,subinitial
>
> updatedn "cn=replicator,o=domainauth"
> updateref ldap://ldap1-int.domain.ca/
>
> access to *
>   by dn="cn=replicator,o=domainauth" write
>   by * read
>
>
>
> Thanks in advance!


-- 
Pierangelo Masarati
mailto:pierangelo.masarati@sys-net.it