[Date Prev][Date Next] [Chronological] [Thread] [Top]

Replication suddenly broken



One of my coworkers just noticed that replication is broken between our 
primary and secondary LDAP servers. It appears to have been broken for 
about 1 week now. Nothing has changed relative to the LDAP configuration 
on either of our servers, so this is an odd thing to suddenly happen. 
When I look at the consumer with some debugging on, I see these messages 
(/usr/sbin/slapd -d 1638 was used to get these messages):

It looks like the consumer 
host/voltron-b.pppl.gov,cn=pppl.gov,cn=gssapi,cn=auth,is being rejected 
as not being authorized, but this has been working for years w/o issue. 
Any idea what has changed and how I may fix it?

ldap_write: want=22, written=22
   0000:  30 14 02 01 02 60 0f 02  01 03 04 00 a3 08 04 06   
0....`..........
   0010:  47 53 53 41 50 49                                  GSSAPI
ldap_read: want=8, got=8
   0000:  30 4a 02 01 02 61 45 0a                            0J...aE.
ldap_read: want=68, got=68
   0000:  01 0e 04 00 04 1c 53 41  53 4c 28 30 29 3a 20 73   
......SASL(0): s
   0010:  75 63 63 65 73 73 66 75  6c 20 72 65 73 75 6c 74   uccessful 
result
   0020:  3a 20 87 20 05 04 05 ff  00 0c 00 00 00 00 00 00   : . 
............
   0030:  3a f9 e0 c9 07 00 00 00  fd e6 0d 82 df 31 29 00   
:............1).
   0040:  a7 27 90 6a                                        .'.j
ldap_write: want=116, written=116
   0000:  30 72 02 01 03 60 6d 02  01 03 04 00 a3 66 04 06   
0r...`m......f..
   0010:  47 53 53 41 50 49 04 5c  05 04 04 ff 00 0c 00 00   
GSSAPI.\........
   0020:  00 00 00 00 36 3c fc 1d  04 ff ff ff 64 6e 3a 75   
....6<......dn:u
   0030:  69 64 3d 68 6f 73 74 2f  76 6f 6c 74 72 6f 6e 2d   
id=host/voltron-
   0040:  62 2e 70 70 70 6c 2e 67  6f 76 2c 63 6e 3d 70 70   
b.pppl.gov,cn=pp
   0050:  70 6c 2e 67 6f 76 2c 63  6e 3d 67 73 73 61 70 69   
pl.gov,cn=gssapi
   0060:  2c 63 6e 3d 61 75 74 68  c2 5d 9b 4a ce d9 d6 8b   
,cn=auth.].J....
   0070:  23 5f b4 1d                                        #_..
ldap_read: want=8, got=8
   0000:  30 3c 02 01 03 61 37 0a                            0<...a7.
ldap_read: want=54, got=54
   0000:  01 32 04 00 04 30 53 41  53 4c 28 2d 31 34 29 3a   
.2...0SASL(-14):
   0010:  20 61 75 74 68 6f 72 69  7a 61 74 69 6f 6e 20 66    
authorization f
   0020:  61 69 6c 75 72 65 3a 20  6e 6f 74 20 61 75 74 68   ailure: not 
auth
   0030:  6f 72 69 7a 65 64                                  orized
5e20cedc slap_client_connect: URI=ldap://ldap1.pppl.gov 
ldap_sasl_interactive_bind_s failed (50)
ldap_write: want=7, written=7
   0000:  30 05 02 01 04 42 00                               0....B.
5e20cedc do_syncrepl: rid=001 rc 50 retrying


-- Prentice