We have a single master replicating to two consumers. When I update the
ACIs on the master using ldapmodify, the ACIs are applied to the
supplier without error ...
Of particular interest is the err=32 on the search for the
nsDS5ReplicaId. All other replication, including schema, is working as
expected. For some reason, just the ACI won't replicate. Any thoughts?
Terry
--
Terry Soucy, Systems Analyst Integrated Technology Services
University of New Brunswick, Fredericton Campus http://www.unbf.ca/its
Voice: 506.447.3018 Fax: 506.453.3590 E-mail: tsoucy@unb.ca
** ITS is a scent-reduced workplace - www.unbf.ca/its/policies **
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
08-31-2010, 08:29 PM
Rich Megginson
ACI's not replicating
Terry Soucy wrote:
> Running 389-server 1.2.5 on RHEL 5 (Intel)
>
> We have a single master replicating to two consumers. When I update the
> ACIs on the master using ldapmodify, the ACIs are applied to the
> supplier without error ...
>
> [31/Aug/2010:09:18:37 -0300] conn=100572906 fd=81 slot=81 connection
> from 131.202.5.14 to 131.202.5.15
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=0 BIND dn="cn=directory
> manager" method=128 version=3
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=0 RESULT err=0 tag=97
> nentries=0 etime=0 dn="cn=directory manager"
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=1 MOD dn="dc=unb,dc=ca"
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=1 RESULT err=0 tag=103
> nentries=0 etime=0 csn=4c7cf31d000000010000
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=2 UNBIND
> [31/Aug/2010:09:18:37 -0300] conn=100572906 op=2 fd=81 closed - U1
>
> One the consumer, I get the following ...
>
> [31/Aug/2010:09:18:36 -0300] conn=30854964 fd=66 slot=66 connection from
> 131.202.5.15 to 131.202.5.14
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=0 BIND dn="cn=replication
> manager, cn=config" method=128 version=3
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=0 RESULT err=0 tag=97
> nentries=0 etime=0 dn="cn=replication manager,cn=config"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=1 SRCH base="" scope=0
> filter="(objectClass=*)" attrs="supportedControl supportedExtension"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=1 RESULT err=0 tag=101
> nentries=1 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=2 SRCH base="" scope=0
> filter="(objectClass=*)" attrs="supportedControl supportedExtension"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=2 RESULT err=0 tag=101
> nentries=1 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=3 EXT
> oid="2.16.840.1.113730.3.5.3" name="Netscape Replication Start Session"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=3 RESULT err=0 tag=120
> nentries=0 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=4 SRCH
> base="cn=replica,cn=22dc=unb,dc=ca22,cn=mapping tree,cn=config"
> scope=0 filter="(objectClass=*)" attrs="nsDS5ReplicaId"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=4 RESULT err=32 tag=101
> nentries=0 etime=0
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=5 MOD dn="dc=unb,dc=ca"
> [31/Aug/2010:09:18:36 -0300] conn=30854964 op=5 RESULT err=0 tag=103
> nentries=0 etime=0 csn=4c7cf31d000000010000
> [31/Aug/2010:09:18:38 -0300] conn=30854964 op=6 EXT
> oid="2.16.840.1.113730.3.5.5" name="Netscape Replication End Session"
> [31/Aug/2010:09:18:38 -0300] conn=30854964 op=6 RESULT err=0 tag=120
> nentries=0 etime=0
> [31/Aug/2010:09:19:38 -0300] conn=30854964 op=7 UNBIND
> [31/Aug/2010:09:19:38 -0300] conn=30854964 op=7 fd=66 closed - U1
>
> Of particular interest is the err=32 on the search for the
> nsDS5ReplicaId. All other replication, including schema, is working as
> expected. For some reason, just the ACI won't replicate. Any thoughts?
>
I don't think the nsDS5ReplicaId is related to the ACIs not replicating.
Are all of the servers/consumers running 1.2.5?
What are you using to test and verify aci replication i.e. exact command
and command line arguments?
> Terry
>
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
08-31-2010, 10:20 PM
Terry Soucy
ACI's not replicating
I think we were a bit mislead by the console. 389-console doesn't
show the number of ACIs on consumers, where the sun one DS console
showed them. I did a quick ldapsearch for the ACIs on the supplier
and consumers and they are all present and accounted for on all systems.
Terry Soucy
Quoting Rich Megginson <rmeggins@redhat.com>:
> I don't think the nsDS5ReplicaId is related to the ACIs not replicating.
>
> Are all of the servers/consumers running 1.2.5?
>
> What are you using to test and verify aci replication i.e. exact command
> and command line arguments?
--
Terry Soucy, Systems Analyst Integrated Technology Services
University of New Brunswick, Fredericton Campus http://www.unbf.ca/its
Voice: 506.447.3018 Fax: 506.453.3590 E-mail: tsoucy@unb.ca
** ITS is a scent-reduced workplace - www.unbf.ca/its/policies **
--
389 users mailing list
389-users@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users
ACI's not replicating
