[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Replication with Open LDAP

On 4/5/07, Jools <jools@oss4all.plus.com> wrote: 
Hi All,

I'm half way through implementing and LDAP Master/Slave setup and have ground to
a halt on replication.

I have LDAP working fine on the master and Samba works fine with it but I can't
get the slurpd to push changes to the slave.

When I try I get the following:

Apr  5 15:15:37 smb7 slapd[5578]: fd=16 DENIED from unknown (172.20.0.105)


I have the following in slapd.conf on the master:

replica host=172.20.0.107:389

binddn="cn=Replicator,dc=People,dc=bordengrammar,dc=kent,dc=sch,dc=uk"
                bindmethod=simple credentials=??????????? (omitted for obvious
reasons)

and this on the slave:

# Replicas running syncrepl as non-rootdn
"cn=Administrator,dc=bordengrammar,dc=kent,dc=sch,dc=uk"
limits group="cn=Replicator,dc=Group,dc=bordengrammar,dc=kent,dc=sch,dc=uk"
 size=unlimited
 time=unlimited

# ACL ensuring replicator has write access
access to *
       by group="cn=Replicator,ou=Group,dc=bordengrammar,dc=kent,dc=sch,dc=uk" write
       by * read

# Replica configuration (if this server is a slave)
updatedn        "cn=Replicator,dc=People,dc=bordengrammar,dc=kent,dc=sch,dc=uk"
updateref       "ldap://172.20.0.105";


Your updatedn doesn't match your ACL.

Can you try some stuff with
cn=Replicator,ou=Group,dc=bordengrammar,dc=kent,dc=sch,dc=uk directly
with ldapmodify first?  And then change the updatedn or acl
accordingly.

Maybe you should try using access to * by dn.exact="" write instead of group="".

Also: 
# Replicas running syncrepl as non-rootdn
"cn=Administrator,dc=bordengrammar,dc=kent,dc=sch,dc=uk"
limits group="cn=Replicator,dc=Group,dc=bordengrammar,dc=kent,dc=sch,dc=uk"
 size=unlimited
 time=unlimited


You're not using syncrepl (at least, you seem to want to use slurpd),
so that's a little confusing.
And I'm also not sure if this 'limits' is going to work for the same
reasons I'm not sure about the acl.

fyi- slurpd is getting deprecated in 2.5 or something.

_Matt