RE: 2.4.28 cn=config replication trouble

[Aaron Bennett <abennett@clarku.edu>]

>-----Original Message-----
>From: Quanah Gibson-Mount [mailto:quanah@zimbra.com]
>Sent: Thursday, February 02, 2012 4:02 PM
>To: Aaron Bennett; openldap-technical@openldap.org
>Subject: RE: 2.4.28 cn=config replication trouble
>
>All binds are SASL binds.  You're probably using SASL SIMPLE, which most people
>don't think of as "SASL" when compared to things like SASL GSSAPI or SASL
>DIGEST-MD5.
>
>--Quanah
	
Quanah -- thank you.  I am in fact using bindmethod=simple, which I did not realize meant SASL SIMPLE.  

I still don't understand why, although replication is working, I see all these sasl bind fails in the sync log:

Feb  2 15:55:33 animal slapd[9301]: slap_client_connect: URI=ldaps://zoot.clarku.edu DN="cn=config" ldap_sasl_bind_s failed (-1)

Do you need to see -d1 output?

Thanks for your time,

Aaron