Hi List.
I have been trying to set up replication between two LDAP servers running OpenSuSE10.2 and Openldap 2-2.3.27-25 but unfortunately I am not having a lot of success :(
The master server is called ldap1. This is
slapd.conf:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++
loglevel -1
TLSCertificateFile /etc/openldap/servercert.pem
TLSCACertificateFile /etc/openldap/cacert.pem
TLSCertificateKeyFile /etc/openldap/serverkey.pem
database bdb
suffix "dc=mydomain,dc=com"
rootdn "cn=Administrator,dc=mydomain,dc=com"
rootpw "{ssha}mypassword"
directory /var/lib/ldap/
checkpoint 1024 5
cachesize 10000
index objectClass,uidNumber,gidNumber eq
index member,mail eq,pres
index cn,displayname,uid,sn,givenname sub,eq,pres
#Entries for replication
replica uri=ldap://192.168.2.246.1:389
binddn="cn=replica,dc=mydomain,dc=com"
bindmethod=simple
credentials="{ssha}mypassword"
replogfile /var/lib/ldap/slurpd.replog
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
As you can see the loglevel is set to -1 as I have been trying to troubleshoot this for the last two days...
The slave server is ldap2 and here is slapd.conf:
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
loglevel -1
database bdb
suffix "dc=mydomain,dc=com"
rootdn "cn=replica,dc=mydomain,dc=com"
rootpw "{ssha}mypassword"
directory /var/lib/ldap/
checkpoint 1024 5
cachesize 10000
index objectClass,uidNumber,gidNumber eq
index member,mail eq,pres
index cn,displayname,uid,sn,givenname sub,eq,pres
#Entries for replication
updatedn="cn=replica,dc=mydomain,dc=com"
updateref=ldap://ldap1.mydomain.com
replogfile /var/lib/ldap/slurpd.replog
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
OK so slapd starts without error on both servers and slurpd on ldap1.
/var/lib/ldap/slurpd.replog is created successfully and there is also another replog file created in /var/lib/slurpd/replica/slurpd.replog which the man page tells me is a working directory to which slurpd copies the replog before processing it.
Ok so now all seems normal up to here but this is where the trouble starts.
I update an entry in the database on ldap1 and the following is written to /var/lib/slurpd/replica/slurpd.replog:
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
replica: 192.168.2.246
time: 1194939780
dn: uid=user.three,ou=people,dc=mydomain,dc=com
changetype: modify
replace: sn
sn: Tres
-
replace: entryCSN
entryCSN: 20071113074300Z#000000#00#000000
-
replace: modifiersName
modifiersName: cn=Administrator,dc=mydomain,dc=com
-
replace: modifyTimestamp
modifyTimestamp: 20071113074300Z
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
but /var/lib/ldap/slurpd.replog remains empty and the updated entry is not replicated to ldap2
The permissions on /var/lib/ldap/slurpd.replog:
-rw-r--r-- 1 ldap ldap 0 2007-11-13 11:43 /var/lib/ldap/slurpd.replog
I don't see any other errors in /var/log/messages but there is a LOT of output and I most of it seems quite cryptic.
I am really at a loss here and would appreciate it if anybody can point out a mistake in my configuration or any other glaringly obvious errors.
Thanks
Lawrence