--On Tuesday, February 24, 2009 9:00 AM -0800 Jeff Schroeder
<[email protected]> wrote:
Hello,
I'm attempting to setup a delta-syncrepl replication scheme to replace
an aging slurpd installation and am having troubles. After trying
about 4 different tutorials and going through the docs this is almost
working. When bringing up a new ldap slave, it copies the database
down from the provider and seems to mirror it locally. When making
additions to the master, they do not replicate down to the slaves.
I suggest you go and re-read the documentation. There are multiple errors
in your setup. See comments below for errors in the master configuration.
database hdb
directory /var/lib/ldap
suffix cn=accesslog
rootdn cn=accesslog
index default eq
index entryCSN,objectClass,reqEnd,reqResult,reqStart
Where's the syncprov overlay on the accesslog DB?
<http://www.openldap.org/doc/admin24/replication.html#Delta-syncrepl>
database hdb
suffix "o=mtt"
directory /var/lib/ldap
rootdn "cn=Manager,o=mtt"
rootpw <SHA1 HASH HERE>
Where are your required indices? for this database?
<http://www.openldap.org/doc/admin24/replication.html#Delta-syncrepl>
overlay syncprov
syncprov-nopresent TRUE
syncprov-reloadhint TRUE
The above two statements do *not* go in the main DB.
<http://www.openldap.org/doc/admin24/replication.html#Delta-syncrepl>
syncprov-checkpoint 1000 60
Just this one does.
overlay accesslog
logdb cn=accesslog
logops writes
logsuccess TRUE
logpurge 07+00:00 01+00:00
This looks correct.
limits dn.exact="cn=Replicator,o=mtt" time.soft=unlimited
time.hard=unlimited size.soft=unlimited size.hard=unlimited
dbconfig set_cachesize 0 2097152 0
dbconfig set_lk_max_objects 1500
dbconfig set_lk_max_locks 1500
dbconfig set_lk_max_lockers 1500
index objectClass eq
lastmod on
checkpoint 512 30
database monitor
monitoring on
=====================================
=========== SLAVE slapd.conf ============
include /etc/openldap/schema/core.schema
include /etc/openldap/schema/cosine.schema
include /etc/openldap/schema/nis.schema
include /etc/openldap/schema/inetorgperson.schema
access to attrs=userPassword
by self write
by anonymous read
by dn.base="cn=Manager,o=mtt" write
by dn.base="cn=Replicator,o=mtt" read
by * read
access to *
by self write
by anonymous read
by dn.base="cn=Manager,o=mtt" write
by dn.base="cn=Replicator,o=mtt" read
by * read
by * read
pidfile /var/run/openldap/slapd.pid
argsfile /var/run/openldap/slapd.args
loglevel none
sizelimit 500
tool-threads 2
backend hdb
database monitor
monitoring on
database hdb
suffix "o=mtt"
directory /var/lib/ldap
rootdn "cn=Manager,o=mtt"
rootpw <SHA1 PASSWORD HASH HERE>
syncrepl rid=0
provider=ldap://ldap.lax03.mtt:389
bindmethod=simple
binddn="cn=Replicator,o=mtt"
credentials=<PLAINTEXT PASSWORD HERE>
searchbase="o=mtt"
logbase="cn=accesslog"
logfilter="(&(objectClass=auditWriteObject)(reqResult=0))"
schemachecking=on
type=refreshAndPersist
retry="60 +"
syncdata=accesslog
updateref ldap://ldap.lax03.mtt
=====================================
--
Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration
