n-way multi master setup

[Joshua Miller <joshua@itsecureadmin.com>]

Good morning,

I am attempting to follow the admin guide in setting up n-way 
multi-master replication.
re: 
http://www.openldap.org/doc/admin24/replication.html#N-Way%20Multi-Master

I'm running OpenLDAP 2.4.7, from Buchan Milne's RPMs, DB 4.6 on CentOS 5.1.

I have setup a working directory on both nodes, then removed all data to 
start fresh, converting my slapd.conf to a slapd.d with slaptest.

ie,
# /etc/init.d/ldap stop
# rm -rf /var/lib/ldap/*
# slaptest -f slapd.conf -F slapd.d
# /etc/init.d/ldap start

Since I already had cn=config setup from my slapd.conf file, I skipped 
that part of the admin guide's instructions.  I then modified the 
directory with the following LDIF, replacing the URI and credential 
values with my environment specific ones:

     dn: cn=config
     changetype: modify
     replace: olcServerID
     olcServerID: 1 ldap://ldapserver1
     olcServerID: 2 ldap://ldapserver2

     dn: olcOverlay=syncprov,olcDatabase={0}config,cn=config
     changetype: add
     objectClass: olcOverlayConfig
     objectClass: olcSyncProvConfig
     olcOverlay: syncprov

     dn: olcDatabase={0}config,cn=config
     changetype: modify
     add: olcSyncRepl
     olcSyncRepl: rid=001 provider=ldap://ldapserver2 
binddn="cn=config" bindmethod=simple
       credentials=secret searchbase="cn=config" type=refreshAndPersist
       retry="5 5 300 5" timeout=1
     olcSyncRepl: rid=002 provider=ldap://ldapserver1 
binddn="cn=config" bindmethod=simple
       credentials=secret searchbase="cn=config" type=refreshAndPersist
       retry="5 5 300 5" timeout=1
     -
     add: olcMirrorMode
     olcMirrorMode: TRUE

I received no errors on running the modify command to add the changes 
from this LDIF.

I then attempted to make a change and have it replicated, very simple to 
start with, using the following LDIF:

dn: cn=config
changetype: modify
replace: olcSecurity
olcSecurity: ssf=256

Once I successfully made this change on ldapserver1, I received the 
following errors in the logs of ldapserver2 (continuously repeating):


ldapserver2 slapd2.4[12172]: conn=15 op=0 EXT oid=1.3.6.1.4.1.1466.20037
ldapserver2 slapd2.4[12172]: conn=15 op=0 STARTTLS
ldapserver2 slapd2.4[12172]: conn=15 op=0 RESULT oid= err=0 text=
ldapserver2 slapd2.4[12172]: conn=15 fd=17 ACCEPT from 
IP=10.12.2.25:4174 (IP=0.0.0.0:389)
ldapserver2 slapd2.4[12172]: conn=15 fd=17 TLS established tls_ssf=256 
ssf=256
ldapserver2 slapd2.4[12172]: conn=15 op=1 BIND dn="cn=config" method=128
ldapserver2 slapd2.4[12172]: conn=15 op=1 BIND dn="cn=config" 
mech=SIMPLE ssf=0
ldapserver2 slapd2.4[12172]: conn=15 op=1 RESULT tag=97 err=0 text=
ldapserver2 slapd2.4[12172]: conn=15 op=2 SRCH base="cn=config" scope=2 
deref=0 filter="(cn=config)"
ldapserver2 slapd2.4[12172]: conn=15 op=2 SEARCH RESULT tag=101 err=0 
nentries=1 text=
ldapserver2 slapd2.4[12172]: conn=15 op=3 UNBIND
ldapserver2 slapd2.4[12172]: conn=15 fd=17 closed
ldapserver2 slapd2.4[12172]: olcServerID: value #1: <olcServerID> 
unknown factor <80>A<C2>
ldapserver2 slapd2.4[12172]: olcServerID: value #1: <olcServerID> 
unknown factor <D0>A<C2>
ldapserver2 slapd2.4[12172]: null_callback : error code 0x50
ldapserver2 slapd2.4[12172]: syncrepl_entry: rid=002 be_modify failed (80)
ldapserver2 slapd2.4[12172]: do_syncrepl: rid=002 retrying (4 retries left)
ldapserver2 slapd2.4[12172]: olcServerID: value #1: <olcServerID> 
unknown factor
ldapserver2 slapd2.4[12172]: olcServerID: value #1: <olcServerID> 
unknown factor
ldapserver2 slapd2.4[12172]: null_callback : error code 0x50



Any idea what I may have done wrong here?

Thanks!
Josh Miller, RHCE