Hi,
I'm using debian etch with slapd 2.3.30 as the master and debian lenny with slapd 2.4.11 as a consumer. I also have a debian etch consumer (slapd 2.3.30).
When doing syncrepl with 2.3.30 consumer everything works fine. When syncrepl with 2.4.11 i get an error:
slapd[19567]: slap_client_connect: URI=ldaps://xxx.xxx.xxx.xxx:8636 DN="cn=xxxxxxx,dc=xxxxxxx,dc=xxx" ldap_sasl_bind_s failed (-1)
Is there a compatibility issue between 2.3.30 and 2.4.11?
--On Sunday, October 04, 2009 7:23 PM +0200 Marc Cuypers marc@cuypers.info wrote:
Is there a compatibility issue between 2.3.30 and 2.4.11?
Yes, although this looks like a configuration error to me. You need newer versions of both 2.3 and 2.4 to allow replication from a 2.3 master to a 2.4 replica. I would highly advise OpenLDAP 2.3.43 with OpenLDAP 2.4.18.
OpenLDAP 2.4.17 Release (2009/07/13) Fixed slapd csn normalization (ITS#6195)
OpenLDAP 2.3.40 Release (2007/12/25) Fixed slapd syncrepl compatibility with 2.4 (ITS#5231)
--Quanah
--
Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc -------------------- Zimbra :: the leader in open source messaging and collaboration
Quanah Gibson-Mount wrote:
--On Sunday, October 04, 2009 7:23 PM +0200 Marc Cuypers marc@cuypers.info wrote:
Is there a compatibility issue between 2.3.30 and 2.4.11?
Yes, although this looks like a configuration error to me. You need newer versions of both 2.3 and 2.4 to allow replication from a 2.3 master to a 2.4 replica. I would highly advise OpenLDAP 2.3.43 with OpenLDAP 2.4.18.
OpenLDAP 2.4.17 Release (2009/07/13) Fixed slapd csn normalization (ITS#6195)
OpenLDAP 2.3.40 Release (2007/12/25) Fixed slapd syncrepl compatibility with 2.4 (ITS#5231)
Well, there's no point upgrading to 2.3.43 compiled from source since 2.3.x series is not maintained anymore. I'd recommend to upgrade both servers to upcoming 2.4.19. The amount of work is the same.
Ciao, Michael.
openldap-technical@openldap.org
-
Marc Cuypers -
Michael Ströder -
Quanah Gibson-Mount