Problems with openldap replication with slurpd

Hi. Trying to make openldap replication Master server is openldap 2.0.27_3, slave server is openldap 2.2.30 Using stunnel to get acces to slave ldap master:localhost:636 -> stunnel -> slave:127.0.0.1:389

Master server config

include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/nis.schema include /usr/local/etc/openldap/schema/inetorgperson.schema include /usr/local/etc/openldap/schema/samba.schema

pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args loglevel 64

atabase ldbm cachesize 10000 dbcachesize 1000000 threads 128 dbnosync dbsync 2 12 5 sizelimit 10000

suffix "o=campus,c=ru" rootdn "cn=Manager,o=campus,c=ru"

rootpw {SSHA}password1 directory /var/db/openldap-ldbm

replogfile /var/log/slurpd.replog replica host=127.0.0.1:636 binddn="cn=replicator,o=campus,c=ru" bindmethod=simple credentials=bind_password

index objectClass eq index uid pres,eq index rid eq index uidNumber eq index gidNumber eq index cn eq,subinitial index memberUid eq

index gecos eq index description eq index default sub

access to attr=userPassword,lmPassword,ntPassword by self write by * auth

access to * by * read

----------------------------------------------------- Slave LDAP config

include /usr/local/etc/openldap/schema/core.schema include /usr/local/etc/openldap/schema/cosine.schema include /usr/local/etc/openldap/schema/nis.schema include /usr/local/etc/openldap/schema/inetorgperson.schema include /usr/local/etc/openldap/schema/samba.schema

pidfile /var/run/openldap/slapd.pid argsfile /var/run/openldap/slapd.args loglevel 64

database bdb

suffix "o=campus,c=ru" rootdn "cn=Manager,o=campus,c=ru"

rootpw {SSHA}paasswoord2 directory /var/db/openldap-data index objectClass eq index uid pres,eq index rid eq index uidNumber eq index gidNumber eq index cn eq index memberUid eq index gecos eq index description eq index default sub

access to * by dn="cn=replicator,o=campus,c=ru" write by * read

First, i am doing "slapcat" at master server and adding LDIFF file to SLAVE ldap. Then i turning on replication by adding lines

updatedn "cn=replicator,o=campus,c=ru" updateref ldap://127.0.0.1:636

to the slave config file.

Master has no runnig slurpd. I am adding new samba user at master and receiving replog file.

Running daemon slurpd at master i receiving "unknown error" then adding new user at slave.

But when i changes something at existent users (password,description,etc) - it replies to slave! Coult you help me to find bug with replica then adding user?

Here is some files:

slurpd.replog

replica: 127.0.0.1:636 time: 1160060587.0 dn: uid=test0981,ou=People,o=campus,c=ru changetype: add objectClass: top objectClass: account objectClass: posixAccount cn: test0981 uid: test0981 uidNumber: 11686 gidNumber: 545 homeDirectory: /home/test0981 loginShell: /usr/bin/false gecos: System User description: System User userPassword:: e2NyeXB0fXg= creatorsName: cn=Manager,o=campus,c=ru createTimestamp: 20061005150306Z modifiersName: cn=Manager,o=campus,c=ru modifyTimestamp: 20061005150306Z

replica: 127.0.0.1:636 time: 1160060596 dn: uid=test0981,ou=People,o=campus,c=ru changetype: modify replace: objectClass objectClass: top objectClass: account objectClass: posixAccount objectClass: sambaAccount - replace: logonTime logonTime: 0 - replace: logoffTime logoffTime: 2147483647 -

... ...

127.0.0.1:636.rej

ERROR: Unknown error replica: 127.0.0.1:636 time: 1160057891.0 dn: uid=test6789,ou=People,o=campus,c=ru changetype: add objectClass: top objectClass: account objectClass: posixAccount cn: test6789 uid: test6789 uidNumber: 11685 gidNumber: 545 homeDirectory: /home/test6789 loginShell: /usr/bin/false gecos: System User description: System User userPassword:: e2NyeXB0fXg= creatorsName: cn=Manager,o=campus,c=ru createTimestamp: 20061005141804Z modifiersName: cn=Manager,o=campus,c=ru modifyTimestamp: 20061005141804Z

ERROR: No such object replica: 127.0.0.1:636 time: 1160057921.0 dn: uid=test6789,ou=People,o=campus,c=ru changetype: modify replace: objectClass objectClass: top objectClass: account objectClass: posixAccount objectClass: sambaAccount -

... ...

slurpd -d 64

output:

...<skip> ...

Config: (directory /var/db/openldap-ldbm) Config: (replogfile /var/log/slurpd.replog) Config: (replica host=127.0.0.1:636 binddn="cn=replicator,o=campus,c=ru" bindmethod=simple credentials=campus_replicator ) Config: ** successfully added replica "127.0.0.1:636" Config: (index objectClass eq) Config: (index uid pres,eq) Config: (index rid eq) Config: (index uidNumber eq) Config: (index gidNumber eq) Config: (index cn eq,subinitial) Config: (index memberUid eq) Config: (index gecos eq) Config: (index description eq) Config: (index default sub) Config: (access to attr=userPassword,lmPassword,ntPassword by self write by * auth) Config: (access to * by * read) Config: ** configuration file successfully read and parsed ber_flush: 58 bytes to sd 8 request 1 done ber_flush: 418 bytes to sd 8 request 2 done

... ... request 6 done Error: ldap_add_s failed adding "Unknown error": uid=test6789,ou=People,o=campus,c=ru Error: ldap operation failed, data written to "/var/db/openldap-slurp/replica/127.0.0.1:636.rej" ber_flush: 51784 bytes to sd 8 request 7 done ber_flush: 471 bytes to sd 8 request 8 done Error: ldap_modify_s failed modifying "No such object": uid=test6789,ou=People,o=campus,c=ru Error: ldap operation failed, data written to "/var/db/openldap-slurp/replica/127.0.0.1:636.rej" ber_flush: 418 bytes to sd 8 request 9 done Error: ldap_modify_s failed modifying "No such object": uid=test6789,ou=People,o=campus,c=ru Error: ldap operation failed, data written to "/var/db/openldap-slurp/replica/127.0.0.1:636.rej" ber_flush: 315 bytes to sd 8 request 10 done

...

WBR, Yushin Roman