[389-users] Re: Question about replication

On 09/05/2018 12:36 PM, rainer@ultra-secure.de wrote:
> Am 2018-09-04 17:39, schrieb Marc Muehlfeld:
>> Hi Rainer,
>
>> Yes it is a typo, it should be:
>> cn=dc\=sub\,dc\=domain\,dc\=ch,cn=mapping tree,cn=config
>> thanks for finding the typo. I fix it and republished the guide:
>> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/html/administration_guide/managing_replication-configuring-replication-cmd#Configuring-Replication-Consumers-cmd
>>
>>
>
>
> Thanks.
> I wasn't sure if it was a silly question - but it surely stumped me.
>
>
> However, I still can't get replication to work.
> (Two hosts, multi-master)
>
> I tried using the command-line only, but the 2nd host would not show
> as "multi-master" in the gui.
>
>
> It's created the replication manager dn like this:
>
> dn: cn=replication manager,cn=config
> objectClass: top
> objectClass: device
> objectClass: simpleSecurityObject
> cn: replication manager
> userPassword:  password
> nsIdleTimeout: 0
>
>
> This I entered in the supplier dn dialog on both servers.
>
> The referral url of server A is server B and vice-versa.
>
> I've set different replica IDs.
>
> In the replication-agreement, I again chose server B on server A and
> vice-versa.
>
> I changed the password for the replication manager to be the same on
> both hosts just to be sure.
>
> When I try to start replicating on server B, I get:
>
>
> [05/Sep/2018:17:08:02.623414486 +0200] - ERR - NSMMReplicationPlugin -
> acquire_replica - agmt="cn=repl-agreement-t1" (serverA:636): Unable to
> acquire replica: permission denied. The bind dn "cn=replication
> manager,cn=config" does not have permission to supply replication
> updates to the replica. Will retry later.
Your replication manager is not configured in the main replication
config entry.  Example:

dn: cn=replica,cn=dc\=example\,dc\=com,cn=mapping tree,cn=config
changetype: add
add: nsds5ReplicaBindDN
nsds5ReplicaBindDN: cn=replication manager,cn=config

Do this on both masters

Regards,
Mark


>
>
>
> What else do I need?
>
>
> Server A already contains some data, will this replicate to server B
> upon initialization or do I have to do something special?
>
>
>
>
>
> Best Regards
> Rainer
> _______________________________________________
> 389-users mailing list -- 389-users@lists.fedoraproject.org
> To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org