Hi guys,<div><br></div><div>I have the following problem: I have two servers, ldap1 and ldap2 that I am trying to sync both ways using syncrepl. However, when I was entering an 8mb data into ldap1 using ldapadd, the changes were not propagated or was not retrieved by ldap2. What&#39;s worse is ldap2 syncrepl gets a &quot;Can&#39;t contact server error.&quot; However, when doing an ldapsearch from the ldap2 terminal to ldap1, the results are displayed.</div>

<div><br></div><div>Additionally, I was doing an ldapsearch in ldap2 while the syncing was going on. Does this have any effect?<br><br>Below is the olcDatabase={2}bdb.ldif files from both ldap1 and ldap2.</div><div><br></div>

<div><div>dn: olcDatabase={2}bdb</div><div>objectClass: olcDatabaseConfig</div><div>objectClass: olcBdbConfig</div><div>olcDatabase: {2}bdb</div><div>olcAddContentAcl: FALSE</div><div>olcLastMod: TRUE</div><div>olcMaxDerefDepth: 15</div>

<div>olcReadOnly: FALSE</div><div>olcSyncUseSubentry: FALSE</div><div>olcMonitoring: TRUE</div><div>olcDbDirectory: /var/lib/ldap</div><div>olcDbCacheSize: 1000</div><div>olcDbCheckpoint: 1024 15</div><div>olcDbNoSync: FALSE</div>

<div>olcDbDirtyRead: FALSE</div><div>olcDbIDLcacheSize: 0</div><div>olcDbIndex: objectClass pres,eq</div><div>olcDbIndex: cn pres,eq,sub</div><div>olcDbIndex: uid pres,eq,sub</div><div>olcDbIndex: uidNumber pres,eq</div>
<div>
olcDbIndex: gidNumber pres,eq</div><div>olcDbIndex: mail pres,eq,sub</div><div>olcDbIndex: ou pres,eq,sub</div><div>olcDbIndex: loginShell pres,eq</div><div>olcDbIndex: sn pres,eq,sub</div><div>olcDbIndex: givenName pres,eq,sub</div>

<div>olcDbIndex: memberUid pres,eq,sub</div><div>olcDbIndex: nisMapName pres,eq,sub</div><div>olcDbIndex: nisMapEntry pres,eq,sub</div><div>olcDbLinearIndex: FALSE</div><div>olcDbMode: 0600</div><div>olcDbSearchStack: 16</div>

<div>olcDbShmKey: 0</div><div>olcDbCacheFree: 1</div><div>olcDbDNcacheSize: 0</div><div>structuralObjectClass: olcBdbConfig</div><div>entryUUID: 3c9dde1a-f65f-1031-92f3-ef68fd07464c</div><div>creatorsName: cn=config</div>

<div>createTimestamp: 20130119083743Z</div><div>olcSuffix: dc=myorganization,dc=org</div><div>olcRootDN: cn=admin,dc=myorganization,dc=org</div><div>olcRootPW: password</div><div>olcAccess: {0}to attrs=employeeType by dn=&quot;cn=sssd,dc=myorganization,dc=org&quot; read by </div>

<div> self read by * none</div><div>olcAccess: {1}to attrs=userPassword,shadowLastChange by self write by anonymous auth by * none</div><div>olcAccess: {2}to dn.base=&quot;&quot; by * none</div><div>olcAccess: {3}to * by dn=&quot;cn=config&quot; write by dn=&quot;cn=sssd,dc=myorganization,dc=org&quot; read by self write by * none</div>

<div>olcSyncrepl: {0}rid=001 provider=ldaps://<a href="http://ldap1.myorganization.org">ldap1.myorganization.org</a> binddn=&quot;cn=admin,dc=myorganization,dc=org&quot; </div><div> bindmethod=simple credentials=password searchbase=&quot;dc=myorganization,dc=org&quot; type=refreshOnly</div>

<div> interval=00:00:05:00 retry=&quot;5 5 300 5&quot; timeout=1</div><div>olcSyncRepl: {2}rid=002 provider=ldaps://<a href="http://ldap2.myorganization.org">ldap2.myorganization.org</a> binddn=&quot;cn=admin,dc=myorganization,dc=org&quot; bindmethod=simple credentials=password searchbase=&quot;dc=myorganization,dc=org&quot; type=refreshOnly interval=00:00:05:00 retry=&quot;5 5 300 5&quot; timeout=1</div>

<div>olcMirrorMode: TRUE</div><div><br></div><div>The ldap1 logs show nothing and the ldap2 logs display the following lines:</div><div><br></div><div><div>do_syncrep2: rid=001 (-1) Can&#39;t contact LDAP server</div><div>

do_syncrepl: rid=001 rc -1 retrying (4 retries left)</div></div><div><br></div><div>I have tried rebooting both the servers but the problem persists. </div><div><br></div><div>I am using OpenLDAP v2.4.23 on a CentOS 6.3 VM.</div>

<div><br></div>-- <br>Carlo Santos<br>
</div>