Is there any known issues between having a 2.4 provider and a 2.2 consumer?
My 2.2 (using SASL) doesn't seem to be binding. I get the connect, but no bind etc (running the provider with '-d -1')... And the log on the consumer just say:
do_syncrep1: ldap_sasl_interactive_bind_s failed (-2)
This is the syncrepl on the consumer: ----- s n i p ----- syncrepl rid=0 provider=ldap://provider.domain.tld:3389 type=refreshOnly interval=00:00:00:30 searchbase="c=SE" filter="(objectClass=*)" attrs="*,+" scope=sub schemachecking=off updatedn="cn=Administrator,cn=auth" binddn="cn=consumer,ou=LDAP,ou=System,o=Domain,c=SE" bindmethod=sasl saslmech=gssapi realm=BAYOUR.COM authcId=consumer updateref ldap://provider.domain.tld:3389 ----- s n i p -----
And this is the provier syncprov config: ----- s n i p ----- overlay syncprov syncprov-checkpoint 100 10 syncprov-sessionlog 100 ----- s n i p -----
On the provider machine, I also have a 2.4 consumer and that works correctly (with almost the exact config as the 2.2 consumer - without the 'updatedn' and 'authcId' - which isn't allowed - though).
I noticed that there is no 'rid' thingie on the provider any more (or in slapadd) but the 2.4 provider/consumer works any way... ?
Turbo Fredriksson wrote:
Is there any known issues between having a 2.4 provider and a 2.2 consumer?
No known issues. Of course 2.2 is Historic; there might be issues but we're not tracking them any more.
My 2.2 (using SASL) doesn't seem to be binding. I get the connect, but no bind etc (running the provider with '-d -1')... And the log on the consumer just say:
do_syncrep1: ldap_sasl_interactive_bind_s failed (-2)
Then you have a problem with SASL, and not with syncrepl itself.
Quoting Howard Chu hyc@symas.com:
Turbo Fredriksson wrote:
Is there any known issues between having a 2.4 provider and a 2.2 consumer?
No known issues. Of course 2.2 is Historic; there might be issues but we're not tracking them any more.
My 2.2 (using SASL) doesn't seem to be binding. I get the connect, but no bind etc (running the provider with '-d -1')... And the log on the consumer just say: do_syncrep1: ldap_sasl_interactive_bind_s failed (-2)
Then you have a problem with SASL, and not with syncrepl itself.
Yeah, I think I finaly found that out. It was the reverse... I don't have propper reverse (yet) so I had to 'fake it' (by setting up my own reverse on all my own DNS servers). However, I missed one of the servers (for some reason) and that naturaly didn't have the reverse for my server(s)...
But fixing this, I get (on the provider, running with 'parse sync none'):
----- s n i p ----- Mar 20 13:38:57 rigel slapd/provider[8932]: do_search: get_ctrls failed ----- s n i p -----
That MUST be a compability problem, right?
openldap-software@openldap.org