Quanah Gibson-Mount wrote:

--On Friday, December 05, 2008 1:18 PM -0800 Ivan Ordonez iordonez@nature.berkeley.edu wrote:

...

Hi Quanah,

I was able to get it to work earlier when I add the startls=critical line. It work when I did it on the slave1, at the time, I made the slave1 as the master. Thanks so much for that. Now moving on the the real master, things did not go well. Now the issue is that, any changes I make on the master, doesn't go to the slaves. I have two slaves and I want those two to get the changes.

example:

            Master
              |
    _ _ _ _ _| |_ _ _ _ _
   |                     |
   |                     |
   |                     |
Slave1               Slave2

Now, when I make any change on the master, the changes will take effect only on master and not on the slaves. I will get this error on both slaves. Is this because of the acl.bdc.readonly.conf line I have on both slave's slapd.conf file? pdbedit -Lv username still work only on account were no changes are made.

Do you see any errors on the master from the slaves binding? Are you sure they have the right permissions to the master? Did you look at what sync logging shows? What is the contextCSN on your master versus your slaves?

At this point, I suggest we take this discussion back to the list, since we got back your earlier config issue (starttls not being set in the syncrepl config).

--Quanah

--

Quanah Gibson-Mount Principal Software Engineer Zimbra, Inc

---

Zimbra :: the leader in open source messaging and collaboration

There is no binding issue from the master. I can connect to the master without issue using the command below:

ldapsearch -LLL -x -H ldap://pdc.ldap.com:389 -D "cn=Replicator,ou=DSA,dc=my,dc=domain,dc=com" -s base -b "dc=my,dc=domain,dc=com" -w mypassword

This is what I got from the log:

init_sam_from_ldap: Entry found for user: i_test5 init_sam_from_ldap: no sambaSID or sambaSID attribute found for this user i_test5 ldapsam_getsampwnam: init_sam_from_ldap failed for user 'i_test5'! Username not found!

Everytime I make any changes on an account using "pdbedit" using the master, the account is not found on the slave even if it was there before I made the change. Has anyone seen this before. I am migrating from slurpd to syncrepl.

Openldap 2.3.43 Samba 3.0.33 Gentoo Linux

Thanks in advance.

-Ivan