Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Rich Megginson
Dan Scott wrote: Hi, On Wed, Oct 6, 2010 at 19:29, Nathan Kinder wrote: On 10/06/2010 03:08 PM, Dan Scott wrote: I'm not sure which group this is referring to. Admins only contains 3 users, no nested groups. Do any other groups have a "member" attribute that points to your "c

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Rich Megginson
Dan Scott wrote: Hi, On Wed, Oct 6, 2010 at 18:30, Rich Megginson wrote: Dan Scott wrote: I'm not sure which group this is referring to. Admins only contains 3 users, no nested groups. The problem appears to be related to the users, rather than the groups. None of the users on ohm ha

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Dan Scott
Hi, On Wed, Oct 6, 2010 at 19:29, Nathan Kinder wrote: > On 10/06/2010 03:08 PM, Dan Scott wrote: >> >> I'm not sure which group this is referring to. Admins only contains 3 >> users, no nested groups. >> > > Do any other groups have a "member" attribute that points to your > "cn=admins" group's

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Nathan Kinder
On 10/06/2010 03:08 PM, Dan Scott wrote: I'm not sure which group this is referring to. Admins only contains 3 users, no nested groups. Do any other groups have a "member" attribute that points to your "cn=admins" group's DN? The error message indicates that some other group has your admin

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Dan Scott
Hi, On Wed, Oct 6, 2010 at 18:30, Rich Megginson wrote: > Dan Scott wrote: >> >> I'm not sure which group this is referring to. Admins only contains 3 >> users, no nested groups. >> >> The problem appears to be related to the users, rather than the >> groups. None of the users on ohm have a 'memb

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Rich Megginson
Dan Scott wrote: I'm not sure which group this is referring to. Admins only contains 3 users, no nested groups. The problem appears to be related to the users, rather than the groups. None of the users on ohm have a 'memberOf'. Curie has the correct memberOf attributes. The error message spe

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Dan Scott
I'm not sure which group this is referring to. Admins only contains 3 users, no nested groups. The problem appears to be related to the users, rather than the groups. None of the users on ohm have a 'memberOf'. Curie has the correct memberOf attributes. The groups themselves appear to be correct

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Rich Megginson
Dan Scott wrote: Hi, ohm_admins.ldif and curie_admins.ldif attached. I added a '-h $hostname' to the command to ensure that I queried both servers. The results look identical to me, apart from the ordering. Thanks, Dan On Wed, Oct 6, 2010 at 15:34, Rob Crittenden wrote: Dan Scott wrote:

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Dan Scott
Hi, ohm_admins.ldif and curie_admins.ldif attached. I added a '-h $hostname' to the command to ensure that I queried both servers. The results look identical to me, apart from the ordering. Thanks, Dan On Wed, Oct 6, 2010 at 15:34, Rob Crittenden wrote: > Dan Scott wrote: >> >> Hi, >> >> On We

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Rob Crittenden
Dan Scott wrote: Hi, On Wed, Oct 6, 2010 at 11:32, Simo Sorce wrote: On Wed, 6 Oct 2010 10:26:48 -0400 Dan Scott wrote: Hi, I have master and slave FreeIPA servers. I recently upgraded the slave by wiping, re-installing Fedora 13 and re-creating the replication using ipa-replica-prepare an

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Dan Scott
Hi, On Wed, Oct 6, 2010 at 11:32, Simo Sorce wrote: > On Wed, 6 Oct 2010 10:26:48 -0400 > Dan Scott wrote: > >> Hi, >> >> I have master and slave FreeIPA servers. I recently upgraded the slave >> by wiping, re-installing Fedora 13 and re-creating the replication >> using ipa-replica-prepare and

Re: [Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Simo Sorce
On Wed, 6 Oct 2010 10:26:48 -0400 Dan Scott wrote: > Hi, > > I have master and slave FreeIPA servers. I recently upgraded the slave > by wiping, re-installing Fedora 13 and re-creating the replication > using ipa-replica-prepare and ipa-replica-install. > > For some reason, the slave is having

[Freeipa-users] Replica not syncing 'memberOf' attributes

2010-10-06 Thread Dan Scott
Hi, I have master and slave FreeIPA servers. I recently upgraded the slave by wiping, re-installing Fedora 13 and re-creating the replication using ipa-replica-prepare and ipa-replica-install. For some reason, the slave is having difficulty replicating the memberOf attribute. I can attach an LDAP