Alexey Lobanov schrieb: [snipp]
Actually, I hoped that someone in this list knows the nature of this problem already. In my understanding, it can be related either with hashed (vs. plaintext) attributes processing in syncrepl or with undocumented requirements to access rights (i.e., syncrepl binddn must have "write" rights instead of "read").
I would remove all ACLs or put a "... by * write" in front for testing and see if it helps. FWIW, we're running 2.3.x as a slave against 2.2.x from a certain Vendor and I failed to get refreshAndPersist working but refreshOnly works.
cheers Paul