I'm using a single provider and one consumer (Open Ldap 2.4.26 on Windows). The replication seems to work only if the provider is online. E.g. if i unplug the provider from the network, the consumer replication will stop and never retries, although retry and interval parameter are set. Only after I restart the consumer, the replication will be continued. Here are my slapd.conf for provider/consumer:
ServerID 1 "ldap://ldapmaster:389" ServerID 2 "ldap://ldapslave:10389"
####################################################################### # bdb database definitions #######################################################################
database bdb suffix "o=userManagement" rootdn "uid=admin,o=userManagement" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. # rootpw admin rootpw {MD5}ISMvKXpXpadDiUoOSoAfww== # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory ./data # Indices to maintain index objectClass eq
overlay syncprov syncprov-checkpoint 1 10 syncprov-sessionlog 100
password-hash {md5}
and for consumer
ServerID 1 "ldap://ldapmaster:389" ServerID 2 "ldap://ldapslave:10389"
####################################################################### # bdb database definitions #######################################################################
database bdb suffix "o=userManagement" rootdn "uid=admin,o=userManagement" # Cleartext passwords, especially for the rootdn, should # be avoid. See slappasswd(8) and slapd.conf(5) for details. # Use of strong authentication encouraged. # rootpw admin rootpw {MD5}ISMvKXpXpadDiUoOSoAfww== # The database directory MUST exist prior to running slapd AND # should only be accessible by the slapd and slap tools. # Mode 700 recommended. directory ./data # Indices to maintain index objectClass eq
syncrepl rid=002 provider=ldap://ldapmaster:389 type=refreshOnly interval=00:00:05:00 searchbase="o=userManagement" attrs="*,+" scope=sub schemachecking=off retry="5 2 1 +" bindmethod=simple binddn="uid=admin,o=userManagement" credentials=admin
password-hash {md5}
Are my settings bad or did I misunderstood it? My assumption was that this setup should do a replication between provider and consumer in the given interval yielding a r/o replica in the consumer ldap.
Thanks for any help, mimo