Re: Can't contact server for syncrepl but can ldapsearch

To: Marc Patermann <hans.moser@ofd-z.niedersachsen.de>

Subject: Re: Can't contact server for syncrepl but can ldapsearch

From: Carlo Santos <moonseraph128@gmail.com>

Date: Tue, 5 Feb 2013 11:14:22 +0800

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=x-received:mime-version:in-reply-to:references:from:date:message-id :subject:to:cc:content-type; bh=tspsBZpOFWRHCs4KTacSCAk1N3XCv2/LZ3Gh2yyh1ps=; b=sSQxwuQEPxMdNPzeQFAoXNBfKWAzHuig6R8kGn9uYaZ58mg4DiOnFTwni7tzbJWEE0 /gvq85/96gqPJuUWPionyhKSefFwbmKhMTZLut5UZ+C34B4lvhSAP9LoVZ/J7i6vOYWD nmYojOWzgbrOK5XEm8Sm2np/m1l7j8h9VZrjY0ZTUuMDkF7owBBs70ruX9M9pjwzy6rl 5aNAB1moHdxQ87nOYMqKrX9940280Gt0/DkUU+kJwqbxsRNmNhh1WiNO1x3K7l4AOnXT WAfRvpcU1ungRXidNsQe7NJLvcrLfIq2F3Ax8tvAtNo8cqbRBhJYzSdc7ylTnszcihwG VxhA==

In-reply-to: <CAGxRVpM28gkOL-Mq+eW8BSYyH+HqtrvDa7pjoY66m+S1krNoag@mail.gmail.com>

References: <CAGxRVpOm4vJEjmTe0Cas9n+dY+KV3aGaaLPnseT=khBS-mBgqA@mail.gmail.com> <510FA974.9040500@ofd-z.niedersachsen.de> <CAGxRVpM28gkOL-Mq+eW8BSYyH+HqtrvDa7pjoY66m+S1krNoag@mail.gmail.com>

Checking further, it appears that slapd service was stopped. However, in the logs, I keep seeing entry_decode lines even though the service is already stopped (according to service slapd status). Additionally, doing an openssl s_client -connect to ldap1 returns a "Connection Refused" error.

On Mon, Feb 4, 2013 at 8:46 PM, Carlo Santos <moonseraph128@gmail.com> wrote:

On Mon, Feb 4, 2013 at 8:28 PM, Marc Patermann <hans.moser@ofd-z.niedersachsen.de> wrote:

Carlo,

Carlo Santos schrieb (04.02.2013 09:02 Uhr):

olcSyncRepl: {2}rid=002 provider=ldaps://ldap2.myorganization.org binddn="cn=admin,dc=myorganization,dc=org" bindmethod=simple credentials=password searchbase="dc=myorganization,dc=org" type=refreshOnly interval=00:00:05:00 retry="5 5 300 5" timeout=1

What is the exact ldapsearch you used?

The ldapsearch command I used is this:

ldapsearch -xLLLD "cn=admin,dc=myorganization,dc=org" -H ldaps://ldap1.myorganization.org -b "dc=myorganization,dc=org" -W

Your provider is configured with ldaps, is ldaps started on your servers und did you try ldapsearch with ldaps?

Yes ldaps is enabled on both servers.

Also, I forgot to mention, I got the line do_syncrep2: rid=002 LDAP_RES_INTERMEDIATE - SYNC_ID_SET multiple times before a single do_syncrep2: rid=002 (-1) Can't contact LDAP server is displayed in the slapd logs.

Does this mean anything?

Marc

--
Carlo Santos

--
Carlo Santos