Hello,<div>This is my first post to this list and unfortunately I come here with a problem. I&#39;m not new to LDAP but I am new to OpenLDAP especially the 2.4 release. </div><div>I am trying to get multi master replication working and I&#39;ve read the documentation several times. I did wonder if this might be a bug but I still think it&#39;s probably a misunderstanding on my part.</div>
<div><br></div><div>I have 2 servers configured for multi master replcation which I will refer to as server A and B. If I start both servers I can make changes on server A which are immediately replicated to server B. However if I then start making changes to server B I don&#39;t see replication back to A. The same thing happens if I initiate replication from B, then replication to A works but not the other way around. i.e. replication only works in 1 direction which is determined by which server I make changes on first. I am using slapd.conf as I didn&#39;t want to complicate matters by introducing online config. The specific version is 2.4.31. Connectivity between the servers is working fine - I can perform LDAP operations in both directions.</div>
<div>If someone could take a look at my config I&#39;d much appreciate it. </div><div><br></div><div>Thanks</div><div>Neil</div><div><br></div><div><br></div><div><font face="&#39;courier new&#39;, monospace">#slapd.conf Server A (</font><span style="font-family:&#39;courier new&#39;,monospace">10.5.1.110)</span></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">pidfile                 /usr/local/openldap/var/run/slapd.pid</font></div><div><div><font face="&#39;courier new&#39;, monospace">argsfile                /usr/local/openldap/var/run/slapd.args</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/core.schema</font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/cosine.schema</font></div>
<div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/solaris.schema</font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/inetorgperson.schema</font></div>
<div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/DUAConfigProfile.schema</font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/sudo.schema</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">modulepath              /usr/local/openldap/libexec</font></div><div><font face="&#39;courier new&#39;, monospace">moduleload              <a href="http://syncprov.la">syncprov.la</a></font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">access to attrs=userPassword</font></div><div><font face="&#39;courier new&#39;, monospace">        by self write</font></div>
<div><font face="&#39;courier new&#39;, monospace">        by * auth</font></div><div><font face="&#39;courier new&#39;, monospace">        by dn=&quot;cn=ldapclient,ou=profile,dc=example,dc=com&quot; write</font></div><div>
<font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">access to dn.base=&quot;&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">        by * read</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">access to *</font></div><div><font face="&#39;courier new&#39;, monospace">        by self write</font></div>
<div><font face="&#39;courier new&#39;, monospace">        by users read</font></div><div><font face="&#39;courier new&#39;, monospace">        by anonymous read</font></div><div><font face="&#39;courier new&#39;, monospace"><br>
</font></div><div><font face="&#39;courier new&#39;, monospace">serverID                1</font></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">database                hdb</font></div>
<div><font face="&#39;courier new&#39;, monospace">suffix                  &quot;dc=example,dc=com&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">rootdn                  &quot;cn=Manager,dc=example,dc=com&quot;</font></div>
<div><font face="&#39;courier new&#39;, monospace">rootpw                  {SSHA}pnqaqMcoMhnDbSRa9WAgDbhBMr/QnUGY</font></div><div><font face="&#39;courier new&#39;, monospace">lastmod                 on</font></div><div>
<font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">directory               /usr/local/openldap/var/openldap-data</font></div><div><font face="&#39;courier new&#39;, monospace"><br>
</font></div><div><font face="&#39;courier new&#39;, monospace">index                   objectclass,uid,uidNumber,memberUid,entryCSN,entryUUID,automountKey eq</font></div><div><font face="&#39;courier new&#39;, monospace">index                   cn,sn,gn,mail   eq,sub</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">syncrepl rid=001</font></div><div><font face="&#39;courier new&#39;, monospace">        provider=ldap://<a href="http://10.7.82.3">10.7.82.3</a></font></div>
<div><font face="&#39;courier new&#39;, monospace">        type=refreshAndPersist</font></div><div><font face="&#39;courier new&#39;, monospace">        searchbase=&quot;dc=example,dc=com&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">        attrs=&quot;*,+&quot;</font></div>
<div><font face="&#39;courier new&#39;, monospace">        bindmethod=simple</font></div><div><font face="&#39;courier new&#39;, monospace">        binddn=&quot;cn=manager,dc=example,dc=com&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">        credentials=&quot;secret&quot;</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">mirrormode              TRUE</font></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div>
<div><font face="&#39;courier new&#39;, monospace">overlay                 syncprov</font></div><div><font face="&#39;courier new&#39;, monospace">syncprov-checkpoint     100 10</font></div><div><font face="&#39;courier new&#39;, monospace">syncprov-sessionlog     100</font></div>
</div><div><span style="font-family:&#39;courier new&#39;,monospace">#######################################################</span></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">#slapd.conf server B (</font><span style="font-family:&#39;courier new&#39;,monospace">10.7.82.3)</span></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><div><font face="&#39;courier new&#39;, monospace">pidfile                 /usr/local/openldap/var/run/slapd.pid</font></div><div><font face="&#39;courier new&#39;, monospace">argsfile                /usr/local/openldap/var/run/slapd.args</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/core.schema</font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/cosine.schema</font></div>
<div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/solaris.schema</font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/inetorgperson.schema</font></div>
<div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/DUAConfigProfile.schema</font></div><div><font face="&#39;courier new&#39;, monospace">include                 /usr/local/openldap/etc/schema/sudo.schema</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">modulepath              /usr/local/openldap/libexec</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">moduleload              <a href="http://syncprov.la">syncprov.la</a></font></div><div><font face="&#39;courier new&#39;, monospace"><br>
</font></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">access to attrs=userPassword</font></div><div><font face="&#39;courier new&#39;, monospace">        by self write</font></div>
<div><font face="&#39;courier new&#39;, monospace">        by * auth</font></div><div><font face="&#39;courier new&#39;, monospace">        by dn=&quot;cn=ldapclient,ou=profile,dc=example,dc=com&quot; write</font></div><div>
<font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">access to dn.base=&quot;&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">        by * read</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">access to *</font></div><div><font face="&#39;courier new&#39;, monospace">        by self write</font></div>
<div><font face="&#39;courier new&#39;, monospace">        by users read</font></div><div><font face="&#39;courier new&#39;, monospace">        by anonymous read</font></div><div><font face="&#39;courier new&#39;, monospace"><br>
</font></div><div><font face="&#39;courier new&#39;, monospace">serverID                2</font></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">database                hdb</font></div>
<div><font face="&#39;courier new&#39;, monospace">suffix                  &quot;dc=example,dc=com&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">rootdn                  &quot;cn=Manager,dc=example,dc=com&quot;</font></div>
<div><font face="&#39;courier new&#39;, monospace">rootpw                  {SSHA}pnqaqMcoMhnDbSRa9WAgDbhBMr/QnUGY</font></div><div><font face="&#39;courier new&#39;, monospace">lastmod                 on</font></div><div>
<font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">directory               /usr/local/openldap/var/openldap-data</font></div><div><font face="&#39;courier new&#39;, monospace"><br>
</font></div><div><font face="&#39;courier new&#39;, monospace">index                   objectclass,uid,uidNumber,memberUid,entryCSN,entryUUID,automountKey eq</font></div><div><font face="&#39;courier new&#39;, monospace">index                   cn,sn,gn,mail   eq,sub</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">syncrepl rid=001</font></div><div><font face="&#39;courier new&#39;, monospace">        provider=ldap://<a href="http://10.5.1.110">10.5.1.110</a></font></div>
<div><font face="&#39;courier new&#39;, monospace">        type=refreshAndPersist</font></div><div><font face="&#39;courier new&#39;, monospace">        searchbase=&quot;dc=example,dc=com&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">        attrs=&quot;*,+&quot;</font></div>
<div><font face="&#39;courier new&#39;, monospace">        bindmethod=simple</font></div><div><font face="&#39;courier new&#39;, monospace">        binddn=&quot;cn=manager,dc=example,dc=com&quot;</font></div><div><font face="&#39;courier new&#39;, monospace">        credentials=&quot;secret&quot;</font></div>
<div><font face="&#39;courier new&#39;, monospace"><br></font></div><div><font face="&#39;courier new&#39;, monospace">mirrormode              TRUE</font></div><div><font face="&#39;courier new&#39;, monospace"><br></font></div>
<div><font face="&#39;courier new&#39;, monospace">overlay                 syncprov</font></div><div><font face="&#39;courier new&#39;, monospace">syncprov-checkpoint     100 10</font></div><div><font face="&#39;courier new&#39;, monospace">syncprov-sessionlog     100</font></div>
</div><div><span style="font-family:&#39;courier new&#39;,monospace">#######################################################</span></div>