Dear Kiran, dear all,
we never used delta-syncrepl.
According to openldap documentation needs the configuration of an
accesslog DIT on the provider. The consumer has to provide
logbase=
logfilter=
in the syncrepl directive, which is not present in our configuration.
According to the log entry
>> do_syncrep2: rid=010 delta-sync lost sync, switching to REFRESH
the consumer allways tries to do delta, but will switch to full
replication if delta is not available.
Can you provide any further clue on debugging this, either on provider
or consumer side?
Thank you for your help!
Nomi
Am 06.03.2014 18:45, schrieb Kiran Ayyagari:
On Wed, Mar 5, 2014 at 8:56 PM, Nomi Meixner
<nomi.meix...@uni-tuebingen.de>wrote:
Dear Kiran, dear all,
you should be able to replicate, let me know the version you are running
and any errors that you see in the logs
We are using openldap 2.4.26 and ApacheDS 2.0.0_M15
error log:
Mar 3 14:18:24 sldap08 slapd[9305]: slapd starting
Mar 3 14:18:24 sldap08 slapd[9305]: do_syncrep2: rid=010
LDAP_RES_SEARCH_RESULT
Mar 3 14:18:24 sldap08 slapd[9305]: do_syncrep2: rid=010 delta-sync lost
sync, switching to REFRESH
looks like you are using delta-syncrepl, ApacheDS doesn't support this yet,
configure syncrepl in your
OpenLDAP server to replicate from ApacheDS
Mar 3 14:18:24 sldap08 slapd[9305]: do_syncrep2: rid=010 (4096) Content
Sync Refresh Required
Mar 3 14:18:24 sldap08 slapd[9305]: do_syncrep2: rid=010
LDAP_RES_SEARCH_RESULT
Mar 3 14:18:24 sldap08 slapd[9305]: do_syncrep2: rid=010 (4096) Content
Sync Refresh Required
Mar 3 14:18:24 sldap08 slapd[9305]: do_syncrep2: rid=010
LDAP_RES_SEARCH_RESULT
sldap.conf
syncrepl rid=10
provider=ldap://bwservices.uni-tuebingen.de:389
starttls=critical
type=refreshOnly
interval=00:12:00:00
retry=300,+
searchbase="o=Universitaet Tuebingen,c=DE"
filter="(|(ou:dn:=bwservices)(objectClass=organization))"
attrs="*,pwdChangedTime,pwdAccountLockedTime,pwdPolicySubentry"
exattrs="accessControlSubentries,entryParentId"
scope=sub
schemachecking=off
bindmethod=simple
binddn="uid=bwservices-reader,ou=users,ou=system"
credentials=xxx
sizelimit=unlimited
timelimit=unlimited
We are having some trouble with the schema. Openldap doesn't accept some
of the operational attributes from ApacheDS. That is why we excluded the
attributes accessControlSubentries and entryParentId from the replication.
Do you need any further information?
Thank you for your help!
Best,
Nomi
