Hi List,<br><br>I need to configure a master and slave ldap server with replication. I am running openSUSE10.2 and openldap2-2.3.27-25.&nbsp; Initially I was using slurpd but syncrepl was recommended to me as being more agreeable with my ldap version. 
<br><br>I configured my master and slave according to the instructions from the openldap web site: <br><a href="http://www.openldap.org/doc/admin22/syncrepl.html">http://www.openldap.org/doc/admin22/syncrepl.html</a><br><br>
Here is the slave slapd.conf:<br><br>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br>loglevel 256<br>TLSCertificateFile /etc/openldap/servercert.pem<br>TLSCACertificateFile /etc/openldap/cacert.pem<br>
TLSCertificateKeyFile /etc/openldap/serverkey.pem<br>database bdb<br>suffix &quot;dc=mydomain,dc=com&quot;<br>rootdn &quot;cn=replica,dc=mydomain,dc=com&quot;<br>rootpw &quot;{ssha}mypassword&quot;<br>directory /var/lib/ldap/
<br>checkpoint 1024 5<br>cachesize 10000<br>index objectClass,uidNumber,gidNumber eq<br>index member,mail eq,pres<br>index cn,displayname,uid,sn,givenname sub,eq,pres<br><br><br>#Entries for replication using sync-repl<br>
<br>&nbsp;syncrepl rid=123<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; provider=ldap://ldap1.mydomain.com<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; type=refreshAndPersist<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #interval=01:00:00:00<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; searchbase=&quot;dc=mydomain,dc=com&quot;<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; filter=&quot;(objectClass=organizationalPerson)&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; scope=sub<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; attrs=&quot;cn,sn,ou,telephoneNumber,title,l&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; schemachecking=off<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; updatedn=&quot;cn=replica,dc=mydomain,dc=com&quot;
<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; bindmethod=sasl<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; #saslmech=digest-md5<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; binddn=&quot;cn=Administrator,dc=mydomain,dc=com&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; credentials=&quot;{ssha}mypassword&quot;<br><br>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
<br><br><br>And here is my master slapd.conf<br><br><br>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br>loglevel 256<br>TLSCertificateFile /etc/openldap/servercert.pem<br>TLSCACertificateFile /etc/openldap/cacert.pem
<br>TLSCertificateKeyFile /etc/openldap/serverkey.pem<br>database bdb<br>suffix &quot;dc=mydomain,dc=com&quot;<br>rootdn &quot;cn=Administrator,dc=mydomain,dc=com&quot;<br>rootpw &quot;{ssha}mypassword&quot;<br>directory /var/lib/ldap/
<br>checkpoint 1024 5<br>cachesize 10000<br>index objectClass,uidNumber,gidNumber eq<br>index member,mail eq,pres<br>index cn,displayname,uid,sn,givenname sub,eq,pres<br><br><br>#Entries for replication using sync-repl<br>
<br>sessionlog 999 999<br><br>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br><br><br>OK as you can see I am using bindmethod=sasl because when I was using bindmethod=simple, I got an error code 49 LDAP_INVALID_CREDENTIALS
<br><br><br>Now as far as I can detirmine from the log below, the connection is made so syncrepl is configured correctly but there is some sort of problem with sasl. It seems that the attribute &quot;supportedSASLMechanisms&quot; is not found on the master. I get the same error If I uncomment the &quot;saslmech=digest-md5&quot; entry.
<br><br>/var/log/messages on the master:<br>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br>Nov 14 18:52:28 ldap1 slapd[18695]: conn=35 fd=13 ACCEPT from IP=<a href="http://192.168.2.246:9243">192.168.2.246:9243
</a> (IP=<a href="http://0.0.0.0:389">0.0.0.0:389</a>)<br>Nov 14 18:52:28 ldap1 slapd[18695]: conn=35 op=0 SRCH base=&quot;&quot; scope=0 deref=0 filter=&quot;(objectClass=*)&quot;<br>Nov 14 18:52:28 ldap1 slapd[18695]: conn=35 op=0 SRCH attr=supportedSASLMechanisms
<br>Nov 14 18:52:28 ldap1 slapd[18695]: conn=35 op=0 SEARCH RESULT tag=101 err=0 nentries=1 text=<br>Nov 14 18:52:28 ldap1 slapd[18695]: conn=35 op=1 UNBIND<br>Nov 14 18:52:28 ldap1 slapd[18695]: conn=35 fd=13 closed<br>+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
<br><br><br><br><br>and on the slave:<br>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br>Nov 14 16:13:47 ldap2 slapd[8305]: @(#) $OpenLDAP: slapd 2.3.27 (Nov 25 2006 17:08:16) $&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; abuild@eisler
:/usr/src/packages/BUILD/openldap-2.3.27/servers/slapd<br>Nov 14 16:14:07 ldap2 slapd[8305]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1: Can&#39;t contact LDAP server<br>Nov 14 16:14:07 ldap2 slapd[8305]: nss_ldap: failed to bind to LDAP server ldap://127.0.0.1: Can&#39;t contact LDAP server
<br>Nov 14 16:14:07 ldap2 slapd[8305]: nss_ldap: could not search LDAP server - Server is unavailable<br>Nov 14 16:14:07 ldap2 slapd[8312]: slapd starting<br>Nov 14 16:14:07 ldap2 slapd[8312]: do_syncrep1: ldap_sasl_interactive_bind_s failed (16)
<br>++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++<br><br>Am I on the right track looking for the errors in sasl, and if so, how do I set the attributes?<br>
<br>
Thanks in advance<br>
<br>
Lawrence<br><br><br><br><br><br>