Hi, I'm doing a mirrormode setup from what I can understand of the admin guide A.2.5 it's possible to mirror cn=config so you only have to make changes on one server. I have two problems though. First: I've looked at test49 and it doesn't seem to use mirrormode. Also - server 1 in test49 has it self as provider ??? I would guess that there would be some troubles with mirroring cn=config since, server 1 should have server 2 as provider and vice-versa. (and that must not be replicated) Is this possible at all or am I chasing a dead end? Second: I have problem with SASL/EXTERNAL and TLS. The server can't seem to find the client certificate. I'm using slapd from Debian Lenny and Ubuntu Hardy, and it's probably due to GnuTLS problems. I get error from slapd like: "TLS: can't accept: A TLS packet with unexpected length was received.." "unable to get TLS client DN, error=-4 id=0" Are GnuTLS just completely broken on Debian Lenny or can this be made to work? /Peter