Re: syncrepl only works as rootdn

[Howard Chu <hyc@symas.com>]

Redirected from -bugs; there is no evidence of a bug here.

Christopher Cowart wrote:
> Hello,
>
> I have 3 installations of openldap-server-2.3.33 running on FreeBSD
> 6.1-REL: ldap-master, ldap1, ldap2. I am using syncrepl to replicate 
> ldap-master to ldap1 and ldap2. The replicated directory is missing 
> entire ou branches in my tree.
>
> I have created the following objects in my directory:
> cn=syncrepl-ldap1,dc=example,dc=com
> cn=syncrepl-ldap2,dc=example,dc=com
>
> I've made the following configurations on the provider:
> | access to *
> |     by dn.regex="cn=syncrepl-(ldap1|ldap2),dc=example,dc=com" read
> |     by * break
> | 
> | # More ACLs Follow
> | 
> | # For Sync Replication
> | overlay syncprov
> | syncprov-checkpoint 100 10
> | syncprov-sessionlog 100

More information is needed. There's no indication that ACLs are any problem 
here. Of course, you've listed your rootdn in your ACLs, which is useless.

One possible explanation is that you didn't raise the sizelimits for the 
syncrepl users, so they weren't able to get a full refresh.

--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc
  Chief Architect, OpenLDAP     http://www.openldap.org/project/