I have added serverid 1 to first server and serverid 2 to secondserver and rid=001 with syncrepl on both the server also added mirrormode true on both node but now when i make changes to one server that is not reflected to another one while before adding mirrormode true whenever i was trying to make changes in dir it gives me error [ Sep 4 10:18:39 mail slapd[20141]: conn=5 op=1 RESULT tag=103 err=53 text=shadow context; no update referral ] So now no idea where I am wrong. Please help me ...
On Wed, Sep 3, 2008 at 6:25 PM, Miguel Jinez miguel.jinez@gmail.com wrote:
Hello, maybe try with a mirrormode line, look the comments in red
Migue
2008/9/3 piyush joshi joy.piyush@gmail.com
*Dear All,* *I am using openldap-2.4.11 version and trying to use N-way multimaster replication so that changes made to first server reflects to second and* *vice versa but with my current set up if i use syncprov overlay and syncrepl on both server then it doesn't allow me to make changes in any ldap server but if i configure syncprov overlay on one server and configure syncrepl on another server it allow me to make changes and as well reflect the changes to another however still i can't make changes to second ldap server my both server configuration is as follows. please let me know what is wrong with this configuration or what all changes to be made to running it.*
Configuration on First LDAP Server
allow bind_v2 include /usr/local/openldap/etc/openldap/schema/core.schema include /usr/local/openldap/etc/openldap/schema/corba.schema include /usr/local/openldap/etc/openldap/schema/cosine.schema include /usr/local/openldap/etc/openldap/schema/nis.schema include /usr/local/openldap/etc/openldap/schema/inetorgperson.schema pidfile /usr/local/openldap/var/run/slapd.pid argsfile /usr/local/openldap/var/run/slapd.args modulepath /usr/local/openldap/libexec/openldap moduleload syncprov password-hash {SSHA} database hdb suffix "dc=***,dc=com" rootdn "cn=root,dc=***,dc=com" rootpw {SSHA}yZkqhHmELfmUTsaQyfxgXBqq95gugTA4 directory /usr/local/openldap/var/openldap-data index uid pres,eq index cn,sn pres,eq,approx,sub index objectClass eq index entryCSN,entryUUID eq syncrepl rid=001 provider=ldap://192.168.1.12 type=refreshAndPersist retry="5 5 300 +" searchbase="dc=***,dc=com" attrs=* binddn="cn=root,dc=***,dc=com" credentials=secret
mirrormode true
overlay syncprov syncprov-checkpoint 50 10 database monitor loglevel 256
Configuration on Second LDAP Serverallow bind_v2 include /usr/local/openldap/etc/openldap/schema/core.schema include /usr/local/openldap/etc/openldap/schema/corba.schema include /usr/local/openldap/etc/openldap/schema/cosine.schema include /usr/local/openldap/etc/openldap/schema/nis.schema include /usr/local/openldap/etc/openldap/schema/inetorgperson.schema pidfile /usr/local/openldap/var/run/slapd.pid argsfile /usr/local/openldap/var/run/slapd.args
modulepath /usr/local/openldap/libexec/openldap moduleload syncprov password-hash {SSHA}
database hdb suffix "dc=***,dc=com" rootdn "cn=root,dc=***,dc=com" rootpw {SSHA}9nbNE9l1rTvPCoU95zgo6vVoL3nMRzMI directory /usr/local/openldap/var/openldap-data index uid pres,eq index cn,sn pres,eq,approx,sub index objectClass eq index entryCSN,entryUUID eq syncrepl rid=001 provider=ldap://192.168.1.8 type=refreshAndPersist retry="5 5 300 +" searchbase="dc=***,dc=com" attrs=* binddn="cn=root,dc=***,dc=com" credentials=secret mirrormode true
overlay syncprov syncprov-checkpoint 50 10 database monitor loglevel 256
Thanks Regards
Piyush Joshi 9415414376
I use accesslog too, try with it in both masters, I'm now using bdb, change it to your backend definition
Migue
allow bind_v2 include /usr/local/openldap/etc/openldap/schema/core.schema include /usr/local/openldap/etc/openldap/schema/corba.schema include /usr/local/openldap/etc/openldap/schema/cosine.schema include /usr/local/openldap/etc/openldap/schema/nis.schema include /usr/local/openldap/etc/openldap/schema/inetorgperson.schema pidfile /usr/local/openldap/var/run/slapd.pid argsfile /usr/local/openldap/var/run/slapd.args modulepath /usr/local/openldap/libexec/openldap moduleload syncprov password-hash {SSHA}
database bdb
suffix cn=accesslog rootdn "cn=accesslog" directory "/usr/local/var/access"
index default eq index entryCSN eq index entryUUID eq index objectClass,reqEnd,reqResult,reqStart,reqDN,contextCSN
access to * by dn="cn=admin,dc=ar" read by * read
database hdb
suffix "dc=***,dc=com" rootdn "cn=root,dc=***,dc=com" rootpw {SSHA}yZkqhHmELfmUTsaQyfxgXBqq95gugTA4 directory /usr/local/openldap/var/openldap-data index uid pres,eq index cn,sn pres,eq,approx,sub index objectClass eq index entryCSN,entryUUID eq syncrepl rid=001 provider=ldap://192.168.1.12 type=refreshAndPersist retry="5 5 300 +" searchbase="dc=***,dc=com" attrs=* binddn="cn=root,dc=***,dc=com" credentials=secret
overlay syncprov syncprov-checkpoint 50 10
overlay accesslog logdb cn=accesslog logops writes logsuccess TRUE logpurge 2+00:00 1+00:00 logold (objectclass=auditDelete) logoldattr reqDeleteOldRDN
database monitor
loglevel 256
mirrormode true
Miguel Jinez wrote:
I use accesslog too, try with it in both masters, I'm now using bdb, change it to your backend definition
I know you're not using delta-syncrepl, but can you try your setup without the accesslog overlay.
when I use accesslog replication works, without it doesn't, what I need to configure it? I have check the administrators guide...
2008/9/4 Gavin Henry ghenry@suretecsystems.com
Miguel Jinez wrote:
I use accesslog too, try with it in both masters, I'm now using bdb, change it to your backend definition
I know you're not using delta-syncrepl, but can you try your setup without the accesslog overlay.
-- Kind Regards,
Gavin Henry. Managing Director.
T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry@suretecsystems.com
Open Source. Open Solutions(tm).
http://www.suretecsystems.com/
Suretec Systems is a limited company registered in Scotland. Registered number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, Aberdeenshire, AB51 4FP.
Thanks All for your wonderful support, Now problem solved.
Solution:- rid must be unique on both the server and I also set mirrormode true on both server as well.
On Fri, Sep 5, 2008 at 2:10 AM, Miguel Jinez miguel.jinez@gmail.com wrote:
when I use accesslog replication works, without it doesn't, what I need to configure it? I have check the administrators guide...
2008/9/4 Gavin Henry ghenry@suretecsystems.com
Miguel Jinez wrote:
I use accesslog too, try with it in both masters, I'm now using bdb, change it to your backend definition
I know you're not using delta-syncrepl, but can you try your setup without the accesslog overlay.
-- Kind Regards,
Gavin Henry. Managing Director.
T +44 (0) 1224 279484 M +44 (0) 7930 323266 F +44 (0) 1224 824887 E ghenry@suretecsystems.com
Open Source. Open Solutions(tm).
http://www.suretecsystems.com/
Suretec Systems is a limited company registered in Scotland. Registered number: SC258005. Registered office: 13 Whiteley Well Place, Inverurie, Aberdeenshire, AB51 4FP.
openldap-technical@openldap.org
-
Gavin Henry -
Miguel Jinez -
piyush joshi