sascha.kuehndel@deka.de wrote:

Full_Name: Sascha Kuehndel Version: 2.4.33 + ITS#7418 OS: HP-UX 11.31 URL: ftp://ftp.openldap.org/incoming/ Submission from: (NULL) (192.166.104.102)

Hallo,

the constraints seams to block the sync-replication.

constraint_attribute dekanetZielgruppenDN uri ldap:///ou=Zielgruppen,ou=dekanet,dc=dekager,dc=dekabank,dc=extern?entryDN?one?(objectClass=dekanetZielgruppe) restrict=ldap:///ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern??one

Seems this is an improper config. If you already have constraints enforced on the provider, then only valid entries may be replicated, so constraints on the consumer are superfluous.

the replication syncs the users in ou=Benutzer first, and later the groups of ou=Zielgruppen. The be_add of the user failed in the consumer, until commenting out the constraint.

here the relevant part of the log file 50c84eff syncrepl_message_to_entry: rid=002 DN: uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern, UUID: XXX-UUID 50c84eff syncrepl_entry: rid=002 LDAP_RES_SEARCH_ENTRY(LDAP_SYNC_ADD) 50c84eff syncrepl_entry: rid=002 inserted UUID XXX-UUID 50c84eff syncrepl_entry: rid=002 be_search (0) 50c84eff syncrepl_entry: rid=002 uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern 50c84f00 slap_queue_csn: queing 6000000000a1d9c0 20120926141541.717811Z#000000#002#000000 50c84f00 slap_graduate_commit_csn: removing 6000000012baa390 20120926141541.717811Z#000000#002#000000 50c84f00 null_callback : error code 0x13 50c84f00 syncrepl_entry: rid=002 be_add uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern (19) 50c84f00 syncrepl_entry: rid=002 be_add uid=XXX,ou=Benutzer,ou=dekanet,dc=dekager,dc=dekabank,dc=extern failed (19) 50c84f00 do_syncrepl: rid=002 rc 19 retrying

Greets, Sascha