Hi again !

I put the refferal in my slapd.conf

# Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. referral        ldap://10.65.11.250

Then the error:

root@replica:~# smbldap-useradd -a ola Error: Referral received at /usr/share/perl5/smbldap_tools.pm line 1187.

Thanks  !

Rodrigo Faria

________________________________ De: Chris Palmer chris.palmer@pobox.com Para: rodrigofariat@yahoo.com.br Cc: openldap-technical@openldap.org Enviadas: Segunda-feira, 14 de Janeiro de 2013 13:33 Assunto: Re: Using smbtools an create account

You are trying to update a read-only replica. You either need to: - update the master instead - change to a two-way style of replication - include an update referral on the replica that directs the client to refer the modification to the master (which then replicates the change to the replica(s)) - include a chain that directs the replica to update the master

Just removing the replication would mean that master/replica are no longer in sync...

Chris

On 14/01/2013 15:07, rodrigo tavares wrote:

Hello People.

I have a samba server and LDAP, it´s running, but i put the slap replicate, come this error:

root@replica:/etc/smbldap-tools# smbldap-useradd -a ola Error: shadow context; no update referral at /usr/share/perl5/smbldap_tools.pm line 1187.

If I remove config slap replicate is run.

syncrepl rid=123                 provider=ldap://10.65.11.250:389                 type=refreshOnly                 interval=00:00:05:00                 retry="60 30 300 +"                 searchbase="dc=net,dc=mg,dc=gov,dc=br"                 filter="(objectClass=*)"                 scope=sub                 attrs="*,+"                 schemachecking=off                 bindmethod=simple                 binddn="cn=admin,dc=net,dc=mg,dc=gov,dc=br"                 credentials=secret

Any idea ?

Rodrigo Faria

Hello !

I put updateref ldap://10.65.11.250:389 in section syncrepl. It's run.

Best regards,

Rodrigo Faria

________________________________ De: Chris Palmer chris.palmer@pobox.com Para: rodrigo tavares rodrigofariat@yahoo.com.br Cc: "openldap-technical@openldap.org" openldap-technical@openldap.org Enviadas: Segunda-feira, 14 de Janeiro de 2013 14:05 Assunto: Re: Using smbtools an create account

On 14/01/2013 15:59, rodrigo tavares wrote:

Hi again !

I put the refferal in my slapd.conf

# Do not enable referrals until AFTER you have a working directory # service AND an understanding of referrals. referral        ldap://10.65.11.250

Then the error:

root@replica:~# smbldap-useradd -a ola Error: Referral received at /usr/share/perl5/smbldap_tools.pm line 1187.

Ok, so it looks like your smbldap client doesn't support referrals (unless you have to configure it somehow to support them - I don't know that particular tool).

Which would rule out the 3rd option....

Thanks  !

Rodrigo Faria

---

*De:* Chris Palmer chris.palmer@pobox.com *Para:* rodrigofariat@yahoo.com.br *Cc:* openldap-technical@openldap.org *Enviadas:* Segunda-feira, 14 de Janeiro de 2013 13:33 *Assunto:* Re: Using smbtools an create account

You are trying to update a read-only replica. You either need to:

• update the master instead
• change to a two-way style of replication
• include an update referral on the replica that directs the client to

refer the modification to the master (which then replicates the change to the replica(s))

• include a chain that directs the replica to update the master

Just removing the replication would mean that master/replica are no longer in sync...

Chris

On 14/01/2013 15:07, rodrigo tavares wrote:

...

Hello People.

I have a samba server and LDAP, it´s running, but i put the slap replicate, come this error:

root@replica:/etc/smbldap-tools# smbldap-useradd -a ola Error: shadow context; no update referral at /usr/share/perl5/smbldap_tools.pm line 1187.

If I remove config slap replicate is run.

syncrepl rid=123                 provider=ldap://10.65.11.250:389                 type=refreshOnly                 interval=00:00:05:00                 retry="60 30 300 +"                 searchbase="dc=net,dc=mg,dc=gov,dc=br"                 filter="(objectClass=*)"                 scope=sub                 attrs="*,+"                 schemachecking=off                 bindmethod=simple                 binddn="cn=admin,dc=net,dc=mg,dc=gov,dc=br"                 credentials=secret

Any idea ?

Rodrigo Faria