On Nov 17, 2005, at 17:03, [EMAIL PROTECTED] wrote:
"{Darkavich} Steven Misrack" <[EMAIL PROTECTED]> wrote:
Nov 17 13:06:36 sr-blr-02 utdsd[379]: [ID 742942 daemon.error] Bind
failed ; act as anonymous
Is that on the DS primary or on a secondary?
It generally means that the Sun Ray admin password cached on this
machine is out of sync with the password held in the Data Store
itself,
so this process has failed to authenticate itself as a privileged
client
and will be treated as an anonymous (and therefore unprivileged)
client.
I figured it out, and it was actually worse than this. I want to open
a bug report on the problem.
Here is what I did.
primary host was X
primary was run as:
utreplica -p -a Y
host Y was run as:
utreplica -p -a X
^^^^^^^^^^^^ Big Mistake.
This forced the LDAP sever on X to change it's DN in the ldap
directory to be cn=utadmin,Y
So after I fixed my mistake on Y and tried to re-run the utreplica on
Y, it failed because the DN was no longer valid on the primary.
The bug is that it really allowed me to do this. I tested this over
and over in the lab and could corrupt a running primary every time by
running "utreplica -p -a X". Every priamry instance is at risk of a -
p typo from a secondary host.
I would suggest that if a primary is getting a request to load the
secondary config, that the command should throw an error or a warning
message.
Did that all make sense?
Since this was a brand new install, I just re-installed the primary
server and re-sync'd
Thanks
--
---------------------------------------------------------------------
Please support Team Qualcomm/SAIC find a cure for MS. Sponsor me in
MS150
http://ms150baytobay.com/darkavich
---------------------------------------------------------------------
Steven Misrack
Staff Engineer
Qualcomm, QCT-Engineering Systems
+1.858.651.7535
Never confuse having a career with having a Life
-- Eddie Bauer
---------------------------------------------------------------------
_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users
